CVE-2012-5757
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Rational ClearQuest是美国IBM公司的一套应用程序生命周期管理 (ALM) 软件。该软件为应用程序提供缺陷跟踪、流程定制、实时报告等，从而提高开发周期的可视性和可控性。 IBM Rational ClearQuest 7.1.2.10之前的7.1.x版本和8.0.0.6之前的8.x版本中的Web客户端中存在跨站脚本漏洞。通过特制的URL，远程攻击者利用该漏洞注入任意web脚本或HTML。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2012-5757
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
IBM Rational ClearQuest Web客户端跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Rational ClearQuest是美国IBM公司的一套应用程序生命周期管理 (ALM) 软件。该软件为应用程序提供缺陷跟踪、流程定制、实时报告等，从而提高开发周期的可视性和可控性。 IBM Rational ClearQuest 7.1.2.10之前的7.1.x版本和8.0.0.6之前的8.x版本中的Web客户端中存在跨站脚本漏洞。通过特制的URL，远程攻击者利用该漏洞注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2012-5757
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2012-5757
请登录查看更多情报信息。
Vendor Advisories for CVE-2012-5757 (3)
-
🔗 http://www.ibm.com/support/docview.wss?uid=swg21619993 x_refsource_CONFIRM
-
-
Same Patch Batch · n/a · 2013-03-21 · 27 CVEs total
| CVE-2013-0675 | Siemens WinCC CCEServer 缓冲区溢出漏洞 | |
| CVE-2013-0672 | Siemens WinCC HMI web 跨站脚本漏洞 | |
| CVE-2013-0671 | Siemens WinCC 目录遍历漏洞 | |
| CVE-2013-0670 | Siemens WinCC HMI web CRLF注入漏洞 | |
| CVE-2013-0669 | Siemens WinCC HMI web 拒绝服务漏洞 | |
| CVE-2013-0668 | Siemens WinCC HMI web 多个跨站脚本漏洞 | |
| CVE-2013-0667 | Siemens WinCC HMI web 跨站脚本漏洞 | |
| CVE-2013-0665 | SEL AcSELerator QuickSet 本地访问绕过漏洞 | |
| CVE-2011-4515 | Siemens SIMATIC WinCC TIA Portal 敏感信息漏洞 | |
| CVE-2013-0679 | Siemens WinCC web服务器目录遍历漏洞 | |
| CVE-2013-0678 | Siemens WinCC 敏感信息漏洞 | |
| CVE-2013-0677 | Siemens WinCC web服务器拒绝服务漏洞 | |
| CVE-2013-0676 | Siemens WinCC 敏感信息漏洞 | |
| CVE-2013-0123 | ASKIA askiaweb 多个SQL注入漏洞 | |
| CVE-2013-0674 | Siemens WinCC RegReader ActiveX控件缓冲区溢出漏洞 | |
| CVE-2013-0287 | SSSD Simple Access Provider ‘simple_deny_groups’访问控制绕过漏洞 | |
| CVE-2013-2279 | 多款CA SiteMinder产品SAML声明签名验证漏洞 | |
| CVE-2013-1427 | lighttpd 不安全临时文件创建漏洞 | |
| CVE-2013-1052 | Ubuntu ‘pam-xdg-support’模块本地权限提升漏洞 | |
| CVE-2013-1051 | apt 欺骗漏洞 |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2012-5757
No comments yet