ID CVE-2012-4848 Type cve Reporter NVD Modified 2017-08-28T21:32:23
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.
{"id": "CVE-2012-4848", "bulletinFamily": "NVD", "title": "CVE-2012-4848", "description": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.", "published": "2012-12-19T06:55:54", "modified": "2017-08-28T21:32:23", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4848", "reporter": "NVD", "references": ["http://www.ibm.com/support/docview.wss?uid=swg21620319", "https://exchange.xforce.ibmcloud.com/vulnerabilities/79537"], "cvelist": ["CVE-2012-4848"], "type": "cve", "lastseen": "2017-08-29T12:17:48", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ibm:lotus_foundations_start:1.1", "cpe:/a:ibm:lotus_foundations_start:1.2.2", "cpe:/a:ibm:lotus_foundations_start:1.2", "cpe:/a:ibm:lotus_foundations_start:1.0"], "cvelist": ["CVE-2012-4848"], "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}, "description": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.", "edition": 1, "enchantments": {}, "hash": "76e8d0301cf199cbe7883c5ade3a3654373d84c0b4c4e043d602e80df880fd3e", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "60f5b6191348bd665da2a957989a1205", "key": "references"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "45d18958120e25f848d70559c82774b3", "key": "href"}, {"hash": "d16a1892885a4cedfc7b1d4344ffb50d", "key": "cvss"}, {"hash": "32e6b9d9bc9e51630b8b8712091ad61b", "key": "modified"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "a38fd6c18b899c2b474db5ca5d477fd2", "key": "published"}, {"hash": "eaeeb0a7dd6a1b5056326fec95d639ca", "key": "cpe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "fdc8540b2903e6cec6fd34e8d35cb945", "key": "description"}, {"hash": "6c481c3cdb2a934e37c2a3daa30e9c94", "key": "title"}, {"hash": "de2a444c534907c1db7b06ee972dac20", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4848", "id": "CVE-2012-4848", "lastseen": "2016-09-03T17:07:46", "modified": "2013-01-29T00:00:00", "objectVersion": "1.2", "published": "2012-12-19T06:55:54", "references": ["http://xforce.iss.net/xforce/xfdb/79537", "http://www.ibm.com/support/docview.wss?uid=swg21620319"], "reporter": "NVD", "scanner": [], "title": "CVE-2012-4848", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T17:07:46"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "eaeeb0a7dd6a1b5056326fec95d639ca"}, {"key": "cvelist", "hash": "de2a444c534907c1db7b06ee972dac20"}, {"key": "cvss", "hash": "d16a1892885a4cedfc7b1d4344ffb50d"}, {"key": "description", "hash": "fdc8540b2903e6cec6fd34e8d35cb945"}, {"key": "href", "hash": "45d18958120e25f848d70559c82774b3"}, {"key": "modified", "hash": "364add63880f7e12753054440d6f5743"}, {"key": "published", "hash": "a38fd6c18b899c2b474db5ca5d477fd2"}, {"key": "references", "hash": "8d2f3fb7edfd168025f5a0ef94c3f2aa"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "6c481c3cdb2a934e37c2a3daa30e9c94"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "d3f5805ad2eaded186a8056f5fa02e632f11acec9341ec95e12de62aad145e44", "viewCount": 0, "enchantments": {"vulnersScore": 8.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:ibm:lotus_foundations_start:1.1", "cpe:/a:ibm:lotus_foundations_start:1.2.2", "cpe:/a:ibm:lotus_foundations_start:1.2", "cpe:/a:ibm:lotus_foundations_start:1.0"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}