Cross-site Scripting (XSS)

🗓️ 15 Jan 2019 08:54:46Reported by Veracode Vulnerability DatabaseType

pki-util vulnerable to cross-site scripting (XSS) attacks in Red Hat Certificate Syste

Reporter	Title	Published	Views	Family All 25
nessus	CentOS 6 : pki-core (CESA-2015:1347)	28 Jul 201500:00	–	nessus
nessus	MiracleLinux 4 : pki-core-9.0.3-43.AXS4 (AXSA:2015-401:01)	16 Jan 202600:00	–	nessus
nessus	Oracle Linux 6 : pki-core (ELSA-2015-1347)	30 Jul 201500:00	–	nessus
nessus	RHEL 5 : pki (RHSA-2012:1103)	8 Nov 201400:00	–	nessus
nessus	RHEL 6 : pki-core (RHSA-2015:1347)	23 Jul 201500:00	–	nessus
nessus	RHEL 7 : pki-core (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
nessus	Scientific Linux Security Update : pki-core on SL6.x i386/x86_64 (20150722)	4 Aug 201500:00	–	nessus
nessus	Linux Distros Unpatched Vulnerability : CVE-2012-2662	4 Mar 202500:00	–	nessus
centos	pki security update	26 Jul 201514:13	–	centos
cve	CVE-2012-2662	13 Aug 201220:00	–	cve

Vulners

Node

pki-tps pki-tpsMatch8.1.0_20.el5pki

pki-tps pki-tpsMatch8.0.0_29.el5pki

pki-common pki-commonMatch8.1.0_23.el5pki

pki-common pki-commonMatch8.0.0_16.el5pki

pki-util pki-utilMatch8.0.1_2.el5pki

pki-util pki-utilMatch8.0.0_16.el5pki

pki-util pki-utilMatch8.1.0_6.el5pki

Source	Link
securitytracker	www.securitytracker.com/id
secunia	www.secunia.com/advisories/50013
securityfocus	www.securityfocus.com/bid/54608
osvdb	www.osvdb.org/84099
access	www.access.redhat.com/security/updates/classification/
rhn	www.rhn.redhat.com/errata/RHSA-2012-1103.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2012:1103
access	www.access.redhat.com/errata/RHSA-2015:1347
access	www.access.redhat.com/security/cve/CVE-2012-2662

13 Feb 2023 01:52Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

EPSS0.01373