CVE-2012-5050

VMware vCenter Operations <5.0.x - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (6)

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2012-10/0069.html

[Vendor Advisory] http://www.vmware.com/security/advisories/VMSA-2012-0014.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/79044

[Third Party Advisory, VDB Entry] http://osvdb.org/85959

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1027612

[Third Party Advisory] http://secunia.com/advisories/50795

Scores

EPSS 0.0033

EPSS Percentile 55.9%

Classification

CWE

CWE-79

Status published

Affected Products (4)

vmware/vcenter_operations < 1.0.2

vmware/vcenter_operations

n/a/n/a

Timeline

Published Oct 05, 2012

Tracked Since Feb 18, 2026