Unscored severity · published Nov 24, 2014
CVE-2012-6662
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject…
–
CVSS
7.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Hpc Node · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
JU
Jquery UI · Jqueryui
1.10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6662
Issue Tracking
http://bugs.jqueryui.com/ticket/8859
Issue Tracking
http://bugs.jqueryui.com/ticket/8861
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0442.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-1462.html
Third Party Advisory
http://seclists.org/oss-sec/2014/q4/613
Third Party Advisory
http://seclists.org/oss-sec/2014/q4/616
More from Jquery UI
7.1
CVE-2024-30875
Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted…
6.1
CVE-2022-31160
jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery
6.1
CVE-2021-41184
jQuery-UI is the official jQuery user interface library
6.1
CVE-2021-41183
jQuery-UI is the official jQuery user interface library
6.1
CVE-2021-41182
jQuery-UI is the official jQuery user interface library