CVE-2012-6074
At a glance Severity Not available EPSS EPSS 1.42 % · percentile 73 (2026-10-27) State PUBLISHED Published 2013-02-24 Updated 2024-08-06 Assigner redhat NVD status Modified Description Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors.
Scores Version Score Vector Scored by CVSS 2.0 LOW 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
Advisories
European references
Affected configurations (NVD CPE) cpe:2.3:a:cloudbees:jenkins:*:*:*:*:*:*:*:* ≤ 1.480.3.1cpe:2.3:a:jenkins:jenkins:1.400:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.401:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.402:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.403:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.404:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.405:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.406:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.407:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.408:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.409:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.410:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.411:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.412:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.413:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.414:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.415:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.416:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.417:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.418:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.419:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.420:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.421:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.422:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.423:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.424:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.425:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.426:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.427:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.428:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.429:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.430:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.431:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.432:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.433:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.434:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.435:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.436:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.437:*:*:*:*:*:*:*cpe:2.3:a:cloudbees:jenkins:1.447.1.1:-:enterprise:*:*:*:*:*+28 more Affected products Product Versions affected n/a
References
Sources
