CVE-2012-2595

CVE-2012-2595 covers multiple reflected XSS vulnerabilities in Siemens WinCC 7.0 SP3 web applications prior to Update 2. The root cause is that web applications do not filter out special characters in URL parameters, enabling remote attackers to inject arbitrary script/HTML. The CVE is documented...