Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3507
HistoryAug 25, 2012 - 12:00 a.m.

CVE-2012-3507

2012-08-2500:00:00
ubuntu.com
ubuntu.com
7

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.6%

Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in
RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote
attackers to inject arbitrary web script or HTML via the email message
subject.

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.6%