Lucene search
Tenable6701.PRMHistoryFeb 27, 2013 - 12:00 a.m.
Apache 2.2 < 2.2.24 Multiple Cross-Site Scripting Vulnerabilites
2013-02-2700:00:00
Tenable
www.tenable.com
13
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.218 Low
EPSS
Percentile
96.5%
The remote host is running a Apache HTTP server.
Versions earlier than 2.4.4 are vulnerable to the following vulnerabilities :
-
Errors exist related to the modules mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp and unescaped hostnames and URIs that could allow cross-site scripting attacks. (CVE-2012-3499)
-
An error exists related to the mod_proxy_balancer module’s manager interface that could allow cross-site scripting attacks. (CVE-2012-4558)
Binary data 6701.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | http_server | 2.2 | cpe:/a:apache:http_server:2.2 |
Related
nessus
nessus
SuSE 10 Security Update : Apache (ZYPP Patch Number 8530)
2013-04-10 00:00:00
Amazon Linux AMI : httpd24 (ALAS-2013-175)
2013-09-04 00:00:00
Apache 2.4.x < 2.4.4 Multiple XSS Vulnerabilities
2013-02-26 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-175)
2015-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0648-1)
2021-06-09 00:00:00
Apache HTTP Server Multiple Vulnerabilities (Feb 2013) - Linux
2021-11-01 00:00:00
amazon
amazon
Medium: httpd24
2013-03-26 21:29:00
Medium: httpd
2013-03-26 21:25:00
Medium: httpd24
2013-05-24 13:57:00
fedora
fedora
[SECURITY] Fedora 18 Update: httpd-2.4.4-2.fc18
2013-04-01 03:30:25
ubuntucve
ubuntucve
CVE-2012-4558
2013-02-26 00:00:00
CVE-2012-3499
2013-02-26 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:015 ] apache
2013-03-02 00:00:00
Apache security vulnerabilities
2013-03-02 00:00:00
slackware
slackware
httpd
2013-03-03 15:02:33
freebsd
freebsd
apache22 -- several vulnerabilities
2012-10-07 00:00:00
f5
f5
SOL15865 - Apache HTTP server vulnerability CVE-2012-4558
2014-11-25 00:00:00
K15900 : Apache HTTP server vulnerability CVE-2012-3499
2014-12-11 00:00:00
SOL15900 - Apache HTTP server vulnerability CVE-2012-3499
2014-12-10 00:00:00
redhat
redhat
(RHSA-2013:0815) Moderate: httpd security update
2013-05-13 00:00:00
(RHSA-2013:1011) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 00:00:00
(RHSA-2013:1012) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 15:40:17
veracode
veracode
Arbitrary Code Injection
2019-05-02 04:44:51
Cross-site Scripting (XSS)
2019-01-15 08:52:43
centos
centos
httpd, mod_ssl security update
2013-05-13 22:32:03
osv
osv
apache2 - several
2013-03-04 00:00:00
debian
debian
[SECURITY] [DSA 2637-1] apache2 security update
2013-03-04 21:34:32
[SECURITY] [DSA 2637-1] apache2 security update
2013-03-04 21:34:32
oraclelinux
oraclelinux
httpd security update
2013-05-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2013-03-18 00:00:00
prion
prion
Cross site scripting
2013-02-26 16:55:00
Cross site scripting
2013-02-26 16:55:00
cve
cve
CVE-2012-3499
2013-02-26 16:55:01
CVE-2012-4558
2013-02-26 16:55:01
httpd
httpd
Apache Httpd < 2.2.24 : XSS due to unescaped hostnames
2012-07-11 00:00:00
Apache Httpd < 2.4.4 : XSS due to unescaped hostnames
2012-07-11 00:00:00
Apache Httpd < 2.2.24 : XSS in mod_proxy_balancer
2012-10-07 00:00:00
debiancve
debiancve
CVE-2012-3499
2013-02-26 16:55:01
CVE-2012-4558
2013-02-26 16:55:01
cvelist
cvelist
CVE-2012-3499
2013-02-26 16:00:00
CVE-2012-4558
2013-02-26 16:00:00
seebug
seebug
Apache HTTP Server多个模块主机名和URI跨站脚本漏洞
2013-02-28 00:00:00
Apache HTTP Server balancer_handler函数跨站脚本漏洞(CVE-2012-4558)
2013-02-28 00:00:00
nvd
nvd
CVE-2012-3499
2013-02-26 16:55:01
CVE-2012-4558
2013-02-26 16:55:01
checkpoint_advisories
checkpoint_advisories
Apache HTTPD mod_proxy_balancer Cross Site Scripting (CVE-2012-4558)
2013-03-24 00:00:00
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
Pornhub: SSRF & XSS (W3 Total Cache)
2016-05-14 01:22:59
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.218 Low
EPSS
Percentile
96.5%
Related for 6701.PRM