Lucene search

[email protected]CVE-2012-6564

HistoryJun 17, 2013 - 11:38 a.m.

CVE-2012-6564

2013-06-1711:38:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-6564

xss

vulnerability

redcap

web script

html

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.9%

JSON

Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
vanderbilt:redcapvanderbilt redcaple4.14.4
vanderbilt:redcapvanderbilt redcapeq4.14.3
vanderbilt:redcapvanderbilt redcapeq4.14.0
vanderbilt:redcapvanderbilt redcapeq4.14.2
vanderbilt:redcapvanderbilt redcapeq4.14.1

CPE	Name	Operator	Version
vanderbilt:redcap	vanderbilt redcap	le	4.14.4
vanderbilt:redcap	vanderbilt redcap	eq	4.14.3
vanderbilt:redcap	vanderbilt redcap	eq	4.14.0
vanderbilt:redcap	vanderbilt redcap	eq	4.14.2
vanderbilt:redcap	vanderbilt redcap	eq	4.14.1

References

ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.9%

JSON

Related for CVE-2012-6564

prion1 cvelist1