Lucene search

K
nvd[email protected]NVD:CVE-2012-4144
HistoryAug 06, 2012 - 4:55 p.m.

CVE-2012-4144

2012-08-0616:55:07
CWE-79
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.

Affected configurations

NVD
Node
operaopera_browserRange12.00
OR
operaopera_browserMatch12.00beta
AND
linuxlinux_kernel
OR
microsoftwindows
Node
operaopera_browserRange11.65
OR
operaopera_browserMatch10.00
OR
operaopera_browserMatch10.00beta1
OR
operaopera_browserMatch10.00beta2
OR
operaopera_browserMatch10.00beta3
OR
operaopera_browserMatch10.01
OR
operaopera_browserMatch10.10
OR
operaopera_browserMatch10.10beta1
OR
operaopera_browserMatch10.11
OR
operaopera_browserMatch10.50
OR
operaopera_browserMatch10.50beta1
OR
operaopera_browserMatch10.50beta2
OR
operaopera_browserMatch10.51
OR
operaopera_browserMatch10.52
OR
operaopera_browserMatch10.52beta1
OR
operaopera_browserMatch10.52beta2
OR
operaopera_browserMatch10.53
OR
operaopera_browserMatch10.53b
OR
operaopera_browserMatch10.53beta1
OR
operaopera_browserMatch10.54
OR
operaopera_browserMatch10.60
OR
operaopera_browserMatch10.60beta1
OR
operaopera_browserMatch10.61
OR
operaopera_browserMatch10.62
OR
operaopera_browserMatch10.63
OR
operaopera_browserMatch11.00
OR
operaopera_browserMatch11.00beta
OR
operaopera_browserMatch11.01
OR
operaopera_browserMatch11.10
OR
operaopera_browserMatch11.10beta
OR
operaopera_browserMatch11.11
OR
operaopera_browserMatch11.50
OR
operaopera_browserMatch11.50beta
OR
operaopera_browserMatch11.51
OR
operaopera_browserMatch11.52
OR
operaopera_browserMatch11.52.1100
OR
operaopera_browserMatch11.60
OR
operaopera_browserMatch11.60beta
OR
operaopera_browserMatch11.61
OR
operaopera_browserMatch11.62
OR
operaopera_browserMatch11.64
OR
operaopera_browserMatch12.00
OR
operaopera_browserMatch12.00beta
AND
applemac_os_x

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

Related for NVD:CVE-2012-4144