Lucene search

K
cve[email protected]CVE-2012-0715
HistoryMar 02, 2012 - 7:55 p.m.

CVE-2012-0715

2012-03-0219:55:01
CWE-79
web.nvd.nist.gov
20
cve-2012-0715
cross-site scripting
xss
ibm tivoli
ccmdb
gantt
security vulnerability
nvd
ibm ilog jviews gantt

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
ibmilog_jviews_ganttMatch-
OR
ibmtivoli_change_and_configuration_management_databaseMatch7.2.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

Related for CVE-2012-0715