CVE-2012-1512

VMware vSphere < 4.1 Update 2 and < 5.0 Update 1 - Cross-Site Scripting via Log-File Entry

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48387
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/52525
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74093
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026817
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/80119

Scores

EPSS 0.0070
EPSS Percentile 72.2%

Details

CWE
CWE-79
Status published
Products (2)
vmware/vsphere < 4.1
vmware/vsphere < 5.0
Published Mar 16, 2012
Tracked Since Feb 18, 2026