CVE

Id
55820  
CVE No.
CVE-2012-2577  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.  
Phase
Assigned (20120509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580984 55820 CVE-2012-2577 CONFIRM:http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm  View
580985 55820 CVE-2012-2577 CERT-VN:VU#174119  View
580986 55820 CVE-2012-2577 URL:http://www.kb.cert.org/vuls/id/174119  View
580987 55820 CVE-2012-2577 BID:54624  View
580988 55820 CVE-2012-2577 URL:http://www.securityfocus.com/bid/54624  View
580989 55820 CVE-2012-2577 SECUNIA:50004  View
580990 55820 CVE-2012-2577 URL:http://secunia.com/advisories/50004  View
580991 55820 CVE-2012-2577 XF:orionnetwork-snmpdconf-csrf(77147)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28146 JVNDB-2012-003853 Open Technology Real Services にクロスサイトスクリプティングの脆弱性 Open Technology Real Services には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2582 55820 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003853.html  View