Published: 26/02/2013 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x prior to 2.2.24-dev and 2.4.x prior to 2.4.4 allow remote malicious users to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache http server 2.2.23
apache http server 2.2
apache http server 2.2.11
apache http server 2.2.0
apache http server 2.2.10
apache http server 2.2.13
apache http server 2.2.2
apache http server 2.2.4
apache http server 2.2.17
apache http server 2.2.16
apache http server 2.2.21
apache http server 2.2.8
apache http server 2.2.14
apache http server 2.2.6
apache http server 2.2.22
apache http server 2.2.19
apache http server 2.2.9
apache http server 2.2.18
apache http server 2.2.12
apache http server 2.2.3
apache http server 2.2.15
apache http server 2.2.20
apache http server 2.2.1
apache http server 2.4.1
apache http server 2.4.0
apache http server 2.4.3
apache http server 2.4.2

Several security issues were fixed in the Apache HTTP Server ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 611 update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Enterprise Application Platform 611, which fixes multiplesecurity issues, various bugs, and adds enhancements, is now available forRed Hat Enterprise Linux 6The Red ...

Synopsis Moderate: httpd security update Type/Severity Security Advisory: Moderate Topic Updated httpd packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerabi ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 611 update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Enterprise Application Platform 611, which fixes multiplesecurity issues, various bugs, and adds enhancements, is now available forRed Hat Enterprise Linux 5The Red ...

Several vulnerabilities have been found in the Apache HTTPD server CVE-2012-3499 The modules mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities CVE-2012-4558 Mod_proxy_balancer did not properly escape hostnames and ...

Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancerc in the mod_proxy_balancer module in the Apache HTTP Server 22x before 2224-dev and 24x before 244 allow remote attackers to inject arbitrary web script or HTML via a crafted string Multiple cross-site scrip ...

Cross-site scripting (XSS) flaws were found in the mod_proxy_balancer module's manager web interface If a remote attacker could trick a user, who was logged into the manager web interface, into visiting a specially-crafted URL, it would lead to arbitrary web script execution in the context of the user's manager interface session (CVE-2012-4558) I ...

Scrape Linux CVE info pages

vuln-checker This is a simple Ruby CLI which scrapes security advisory pages and presents information on available fixes in a table Here's a text screenshot: % ruby -I lib bin/cve Showing information for: CVE-2012-3499 +--------------------+-----------------------------------------------------------+ | RHEL | accessredhatcom/security/cve/CVE-2012-3

CVE-2012-3499

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect