Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-2687
HistoryAug 22, 2012 - 7:55 p.m.

CVE-2012-2687

2012-08-2219:55:01
CWE-79
[email protected]
web.nvd.nist.gov
2

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.

Affected configurations

NVD
Node
apachehttp_serverMatch2.2.0
OR
apachehttp_serverMatch2.2.1
OR
apachehttp_serverMatch2.2.2
OR
apachehttp_serverMatch2.2.3
OR
apachehttp_serverMatch2.2.4
OR
apachehttp_serverMatch2.2.6
OR
apachehttp_serverMatch2.2.8
OR
apachehttp_serverMatch2.2.9
OR
apachehttp_serverMatch2.2.10
OR
apachehttp_serverMatch2.2.11
OR
apachehttp_serverMatch2.2.12
OR
apachehttp_serverMatch2.2.13
OR
apachehttp_serverMatch2.2.14
OR
apachehttp_serverMatch2.2.15
OR
apachehttp_serverMatch2.2.16
OR
apachehttp_serverMatch2.2.17
OR
apachehttp_serverMatch2.2.18
OR
apachehttp_serverMatch2.2.19
OR
apachehttp_serverMatch2.2.20
OR
apachehttp_serverMatch2.2.21
OR
apachehttp_serverMatch2.2.22
OR
apachehttp_serverMatch2.2.23
OR
apachehttp_serverMatch2.4.0
OR
apachehttp_serverMatch2.4.1
OR
apachehttp_serverMatch2.4.2

References

Related

f5 2
cve 1
cvelist 1
nessus 34
prion 1
debiancve 1
ubuntucve 1
openvas 23
securityvulns 4
httpd 2
seebug 1
threatpost 1
ubuntu 1
fedora 1
freebsd 1
veracode 5
centos 2
oraclelinux 2
redhat 5
altlinux 3
oracle 1
f5
f5
SOL15901 - Apache HTTP server vulnerability CVE-2012-2687
2014-12-10 00:00:00
K15901 : Apache HTTP server vulnerability CVE-2012-2687
2015-06-08 00:00:00
cve
cve
CVE-2012-2687
2012-08-22 19:55:01
cvelist
cvelist
CVE-2012-2687
2012-08-22 19:00:00
nessus
nessus
F5 Networks BIG-IP : Apache HTTP server vulnerability (SOL15901)
2014-12-15 00:00:00
openSUSE Security Update : apache2 (openSUSE-SU-2013:0245-1)
2014-06-13 00:00:00
SUSE SLES10 Security Update : apache2 (SUSE-SU-2013:0387-1)
2015-05-20 00:00:00
prion
prion
Cross site scripting
2012-08-22 19:55:00
debiancve
debiancve
CVE-2012-2687
2012-08-22 19:55:01
ubuntucve
ubuntucve
CVE-2012-2687
2012-08-22 00:00:00
openvas
openvas
Mandriva Update for apache MDVSA-2012:154-1 (apache)
2012-10-03 00:00:00
Ubuntu: Security Advisory (USN-1627-1)
2012-11-09 00:00:00
Mandriva Update for apache MDVSA-2012:154-1 (apache)
2012-10-03 00:00:00
securityvulns
securityvulns
Apache security vulnerabilities
2012-10-01 00:00:00
[ MDVSA-2012:154 ] apache
2012-10-01 00:00:00
APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004
2013-10-03 00:00:00
httpd
httpd
Apache Httpd < 2.4.3 : XSS in mod_negotiation when untrusted uploads are supported
2012-05-31 00:00:00
Apache Httpd < 2.2.23 : XSS in mod_negotiation when untrusted uploads are supported
2012-05-31 00:00:00
seebug
seebug
Apache 2.4.2 HTTP Server HTML注入和信息泄露漏洞
2012-08-23 00:00:00
threatpost
threatpost
Apache Fixes Two Security Flaws in Version 2.4.3
2012-08-21 17:45:56
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: httpd-2.2.23-1.fc17
2013-02-12 04:59:23
freebsd
freebsd
apache22 -- several vulnerabilities
2012-09-13 00:00:00
veracode
veracode
Arbitrary File Upload
2019-05-02 04:45:35
Access Restriction Bypass
2019-05-02 04:43:29
Access Restriction Bypass
2019-05-02 04:43:22
centos
centos
httpd, mod_ssl security update
2013-01-09 20:52:40
httpd, mod_ssl security update
2013-02-27 19:35:19
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2013-01-11 00:00:00
httpd security, bug fix, and enhancement update
2013-02-22 00:00:00
redhat
redhat
(RHSA-2013:0512) Low: httpd security, bug fix, and enhancement update
2013-02-21 00:00:00
(RHSA-2013:0130) Low: httpd security, bug fix, and enhancement update
2013-01-08 00:00:00
(RHSA-2012:1592) Important: JBoss Enterprise Application Platform 6.0.1 update
2012-12-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON
Related for NVD:CVE-2012-2687
f52cve1cvelist1nessus34prion1debiancve1ubuntucve1openvas23securityvulns4httpd2seebug1threatpost1ubuntu1fedora1freebsd1veracode5centos2oraclelinux2redhat5altlinux3oracle1