Login Request a demo
Unscored severity · published Apr 22, 2012
CVE-2012-1575
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2)…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cumin · Trevor Mckay
through r5237 · source: NVD
Affected product
CU
Cumin
Trevor Mckay
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1575
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0476.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0477.html
secunia.com
http://secunia.com/advisories/48810
secunia.com
http://secunia.com/advisories/48829
www.securityfocus.com
http://www.securityfocus.com/bid/53000
www.securitytracker.com
http://www.securitytracker.com/id?1026921
More from Cumin
–
CVE-2012-3459
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain…
–
CVE-2012-2735
Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via…
–
CVE-2012-2734
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers…
–
CVE-2012-2685
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption)…
–
CVE-2012-2684
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG)…