Lucene search
Ubuntu.comUB:CVE-2012-1007HistoryFeb 07, 2012 - 12:00 a.m.
CVE-2012-1007
2012-02-0700:00:00
ubuntu.com
ubuntu.com
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
71.6%
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10
allow remote attackers to inject arbitrary web script or HTML via (1) the
name parameter to struts-examples/upload/upload-submit.do, or the message
parameter to (2) struts-cookbook/processSimple.do or (3)
struts-cookbook/processDyna.do.
Related
prion
prion
Cross site scripting
2012-02-07 04:09:00
nessus
nessus
Apache Struts struts-cookbook processSimple.do message Parameter XSS
2012-07-23 00:00:00
Apache Struts struts-examples upload-submit.do 'theText' Parameter XSS
2012-07-23 00:00:00
openvas
openvas
osv
osv
Apache Struts XSS
2022-05-14 02:21:24
github
github
Apache Struts XSS
2022-05-14 02:21:24
cve
cve
CVE-2012-1007
2012-02-07 04:09:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
71.6%
Related for UB:CVE-2012-1007