CVE-2012-5941

Loading...

General

Score:3.5/10.0
Severity:Low
Category:XSS Injection

Impact Metrics

Confidentiality:None
Integrity:Partial
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:Single

Published on 20/02/13 - Updated on 29/08/17

Description

Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.

Category: XSS Injection

CWE-79 (Cross-Site Scripting (XSS))
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Security Notices

US National Vulnerability DatabaseCVE-2012-5941
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2013-AVI-108

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
ibmnetezza

Share this vulnerability with:

Twitter Facebook LinkedIn Mail