CVE-2012-6074
En bref Sévérité Non disponible EPSS EPSS 1.42 % · centile 73 (2026-10-27) État PUBLISHED Publiée 2013-02-24 Mise à jour 2024-08-06 Attribuée par redhat Statut NVD Modified
Description Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors.
Scores Version Score Vecteur Évalué par CVSS 2.0 LOW 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Avis
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:cloudbees:jenkins:*:*:*:*:*:*:*:* ≤ 1.480.3.1cpe:2.3:a:jenkins:jenkins:1.400:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.401:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.402:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.403:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.404:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.405:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.406:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.407:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.408:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.409:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.410:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.411:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.412:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.413:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.414:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.415:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.416:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.417:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.418:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.419:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.420:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.421:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.422:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.423:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.424:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.425:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.426:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.427:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.428:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.429:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.430:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.431:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.432:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.433:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.434:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.435:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.436:*:*:*:*:*:*:*cpe:2.3:a:jenkins:jenkins:1.437:*:*:*:*:*:*:*cpe:2.3:a:cloudbees:jenkins:1.447.1.1:-:enterprise:*:*:*:*:*+28 autres
Produits affectés Produit Versions affected n/a
Références
Sources