Lucene search

CVE-2012-1006

🗓️ 07 Feb 2012 00:00:00Reported by ubuntu.comType

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allowing remote injection of web script or HTML

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Apache Struts 2 struts2-rest-showcase orders 'clientName' Parameter Persistent XSS	23 Jul 201200:00	–	nessus
Tenable Nessus	Apache Struts 2 struts2-showcase edit-person.action Persistent XSS	23 Jul 201200:00	–	nessus
NVD	CVE-2012-1006	7 Feb 201204:09	–	nvd
Prion	Cross site scripting	7 Feb 201204:09	–	prion
OpenVAS	Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities	8 Feb 201200:00	–	openvas
OpenVAS	Apache Struts Showcase Multiple Persistence Cross-Site Scripting Vulnerabilities	8 Feb 201200:00	–	openvas
Github Security Blog	Apache Struts Multiple Cross-site Scripting Vulnerabilities	17 May 202201:49	–	github
CVE	CVE-2012-1006	7 Feb 201204:09	–	cve
OSV	Apache Struts Multiple Cross-site Scripting Vulnerabilities	17 May 202201:49	–	osv
Cvelist	CVE-2012-1006	7 Feb 201202:00	–	cvelist

Source	Link
secpod	www.secpod.org/blog/
secpod	www.secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-1006
launchpad	www.launchpad.net/bugs/cve/CVE-2012-1006
security-tracker	www.security-tracker.debian.org/tracker/CVE-2012-1006

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Feb 2012 00:00Current

4.1Medium risk

Vulners AI Score4.1

CVSS24.3

EPSS0.614