CVE-2012-1512

Vmware Vsphere < 4.1 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry.

References (6)

[Vendor Advisory] http://www.vmware.com/security/advisories/VMSA-2012-0005.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/74093

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/52525

[Third Party Advisory, VDB Entry] http://osvdb.org/80119

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1026817

[Third Party Advisory] http://secunia.com/advisories/48387

Scores

EPSS 0.0070

EPSS Percentile 71.8%

Classification

CWE

CWE-79

Status published

Affected Products (3)

vmware/vsphere < 4.1

vmware/vsphere < 5.0

n/a/n/a

Timeline

Published Mar 16, 2012

Tracked Since Feb 18, 2026