CVE-2012-0324 : Detail

CVE-2012-0324

Cross-site Scripting
A03-Injection
0.22%V3
Network
2012-03-09
10h00 +00:00
2018-01-10
19h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Cloudbees>>Jenkins >> Version 1.400

    Cloudbees>>Jenkins >> Version 1.400.0.12

      Cloudbees>>Jenkins >> Version 1.424

        Cloudbees>>Jenkins >> Version 1.424.5

          Configuraton 0

          Cloudbees>>Jenkins >> Version 1.400

          Cloudbees>>Jenkins >> Version 1.400.0.12

            Configuraton 0

            Cloudbees>>Jenkins >> Version To (including) 1.453

            Jenkins>>Jenkins >> Version 1.301

            Jenkins>>Jenkins >> Version 1.302

            Jenkins>>Jenkins >> Version 1.303

            Jenkins>>Jenkins >> Version 1.304

            Jenkins>>Jenkins >> Version 1.305

            Jenkins>>Jenkins >> Version 1.306

            Jenkins>>Jenkins >> Version 1.307

            Jenkins>>Jenkins >> Version 1.308

            Jenkins>>Jenkins >> Version 1.309

            Jenkins>>Jenkins >> Version 1.310

            Jenkins>>Jenkins >> Version 1.311

            Jenkins>>Jenkins >> Version 1.312

            Jenkins>>Jenkins >> Version 1.313

            Jenkins>>Jenkins >> Version 1.314

            Jenkins>>Jenkins >> Version 1.315

            Jenkins>>Jenkins >> Version 1.316

            Jenkins>>Jenkins >> Version 1.317

            Jenkins>>Jenkins >> Version 1.318

            Jenkins>>Jenkins >> Version 1.319

            Jenkins>>Jenkins >> Version 1.320

            Jenkins>>Jenkins >> Version 1.321

            Jenkins>>Jenkins >> Version 1.322

            Jenkins>>Jenkins >> Version 1.323

            Jenkins>>Jenkins >> Version 1.324

            Jenkins>>Jenkins >> Version 1.325

            Jenkins>>Jenkins >> Version 1.326

            Jenkins>>Jenkins >> Version 1.327

            Jenkins>>Jenkins >> Version 1.328

            Jenkins>>Jenkins >> Version 1.329

            Jenkins>>Jenkins >> Version 1.330

            Jenkins>>Jenkins >> Version 1.331

            Jenkins>>Jenkins >> Version 1.332

            Jenkins>>Jenkins >> Version 1.333

            Jenkins>>Jenkins >> Version 1.334

            Jenkins>>Jenkins >> Version 1.335

            Jenkins>>Jenkins >> Version 1.336

            Jenkins>>Jenkins >> Version 1.337

            Jenkins>>Jenkins >> Version 1.338

            Jenkins>>Jenkins >> Version 1.339

            Jenkins>>Jenkins >> Version 1.340

            Jenkins>>Jenkins >> Version 1.341

            Jenkins>>Jenkins >> Version 1.342

            Jenkins>>Jenkins >> Version 1.343

            Jenkins>>Jenkins >> Version 1.344

            Jenkins>>Jenkins >> Version 1.345

            Jenkins>>Jenkins >> Version 1.346

            Jenkins>>Jenkins >> Version 1.347

            Jenkins>>Jenkins >> Version 1.348

            Jenkins>>Jenkins >> Version 1.349

            Jenkins>>Jenkins >> Version 1.350

            Jenkins>>Jenkins >> Version 1.351

            Jenkins>>Jenkins >> Version 1.352

            Jenkins>>Jenkins >> Version 1.353

            Jenkins>>Jenkins >> Version 1.354

            Jenkins>>Jenkins >> Version 1.355

            Jenkins>>Jenkins >> Version 1.356

            Jenkins>>Jenkins >> Version 1.357

            Jenkins>>Jenkins >> Version 1.358

            Jenkins>>Jenkins >> Version 1.359

            Jenkins>>Jenkins >> Version 1.360

            Jenkins>>Jenkins >> Version 1.361

            Jenkins>>Jenkins >> Version 1.362

            Jenkins>>Jenkins >> Version 1.363

            Jenkins>>Jenkins >> Version 1.364

            Jenkins>>Jenkins >> Version 1.365

            Jenkins>>Jenkins >> Version 1.366

            Jenkins>>Jenkins >> Version 1.367

            Jenkins>>Jenkins >> Version 1.368

            Jenkins>>Jenkins >> Version 1.369

            Jenkins>>Jenkins >> Version 1.370

            Jenkins>>Jenkins >> Version 1.371

            Jenkins>>Jenkins >> Version 1.372

            Jenkins>>Jenkins >> Version 1.373

            Jenkins>>Jenkins >> Version 1.374

            Jenkins>>Jenkins >> Version 1.375

            Jenkins>>Jenkins >> Version 1.376

            Jenkins>>Jenkins >> Version 1.377

            Jenkins>>Jenkins >> Version 1.378

            Jenkins>>Jenkins >> Version 1.379

            Jenkins>>Jenkins >> Version 1.380

            Jenkins>>Jenkins >> Version 1.382

            Jenkins>>Jenkins >> Version 1.383

            Jenkins>>Jenkins >> Version 1.384

            Jenkins>>Jenkins >> Version 1.386

            Jenkins>>Jenkins >> Version 1.387

            Jenkins>>Jenkins >> Version 1.388

            Jenkins>>Jenkins >> Version 1.389

            Jenkins>>Jenkins >> Version 1.390

            Jenkins>>Jenkins >> Version 1.391

            Jenkins>>Jenkins >> Version 1.392

            Jenkins>>Jenkins >> Version 1.393

            Jenkins>>Jenkins >> Version 1.394

            Jenkins>>Jenkins >> Version 1.395

            Jenkins>>Jenkins >> Version 1.396

            Jenkins>>Jenkins >> Version 1.397

            Jenkins>>Jenkins >> Version 1.398

            Jenkins>>Jenkins >> Version 1.399

            Jenkins>>Jenkins >> Version 1.400

            Jenkins>>Jenkins >> Version 1.401

            Jenkins>>Jenkins >> Version 1.402

            Jenkins>>Jenkins >> Version 1.403

            Jenkins>>Jenkins >> Version 1.404

            Jenkins>>Jenkins >> Version 1.405

            Jenkins>>Jenkins >> Version 1.406

            Jenkins>>Jenkins >> Version 1.407

            Jenkins>>Jenkins >> Version 1.408

            Jenkins>>Jenkins >> Version 1.409

            Jenkins>>Jenkins >> Version 1.409.1

            Jenkins>>Jenkins >> Version 1.409.2

            Jenkins>>Jenkins >> Version 1.410

            Jenkins>>Jenkins >> Version 1.411

            Jenkins>>Jenkins >> Version 1.412

            Jenkins>>Jenkins >> Version 1.413

            Jenkins>>Jenkins >> Version 1.414

            Jenkins>>Jenkins >> Version 1.415

            Jenkins>>Jenkins >> Version 1.416

            Jenkins>>Jenkins >> Version 1.417

            Jenkins>>Jenkins >> Version 1.418

            Jenkins>>Jenkins >> Version 1.419

            Jenkins>>Jenkins >> Version 1.420

            Jenkins>>Jenkins >> Version 1.421

            Jenkins>>Jenkins >> Version 1.422

            Jenkins>>Jenkins >> Version 1.423

            Jenkins>>Jenkins >> Version 1.424

            Jenkins>>Jenkins >> Version 1.425

            Jenkins>>Jenkins >> Version 1.426

            Jenkins>>Jenkins >> Version 1.427

            Jenkins>>Jenkins >> Version 1.428

            Jenkins>>Jenkins >> Version 1.429

            Jenkins>>Jenkins >> Version 1.430

            Jenkins>>Jenkins >> Version 1.431

            Jenkins>>Jenkins >> Version 1.432

            Jenkins>>Jenkins >> Version 1.433

            Jenkins>>Jenkins >> Version 1.434

            Jenkins>>Jenkins >> Version 1.435

            Jenkins>>Jenkins >> Version 1.436

            Jenkins>>Jenkins >> Version 1.437

            References

            http://jvndb.jvn.jp/jvndb/JVNDB-2012-000022
            Tags : third-party-advisory, x_refsource_JVNDB
            http://www.securityfocus.com/bid/52384
            Tags : vdb-entry, x_refsource_BID
            http://jvn.jp/en/jp/JVN14791558/index.html
            Tags : third-party-advisory, x_refsource_JVN