CVE-2012-2161

IBM Security AppScan Source 7.x-8.x and SPSS Data Collection 6.0-6.0.1 - Cross-Site Scripting via DeferredView.jsp

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74833
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21598423
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21596690

Scores

EPSS 0.0177
EPSS Percentile 75.9%

Details

CWE
CWE-79
Status published
Products (8)
ibm/security_appscan_source 7.0
ibm/security_appscan_source 8.0
ibm/security_appscan_source 8.0.0.1
ibm/security_appscan_source 8.0.0.2
ibm/security_appscan_source 8.5
ibm/security_appscan_source 8.5.0.1
ibm/spss_data_collection 6.0
ibm/spss_data_collection 6.0.1
Published Jun 20, 2012
Tracked Since Feb 18, 2026