Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1410HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-1410
2022-10-0316:15:25
Debian Security Bug Tracker
security-tracker.debian.org
9
cross-site scripting
kadu
remote attackers
web script
html
sms message
presence message
status description
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
59.8%
Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) SMS message, (2) presence message, or (3) status description.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | kadu | < 0.11.0-1 | kadu_0.11.0-1_all.deb |
Related
nvd
nvd
ubuntucve
ubuntucve
CVE-2012-1410
2012-02-29 00:00:00
prion
prion
Cross site scripting
2012-02-29 11:55:00
cvelist
cvelist
CVE-2012-1410
2022-10-03 16:15:25
cve
cve
nessus
nessus
RHEL 4 : openssl (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : openssl (Unpatched Vulnerability)
2024-06-03 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
59.8%
Related for DEBIANCVE:CVE-2012-1410