NVD

Id
44674  
Name
CVE-2012-2997  
Description
XML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0.0 through 10.2.4 and 11.0.0 through 11.2.1 allows remote authenticated users to read arbitrary files via a crafted XML file.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-01-21  
Modified Date
2014-01-22  
Seq
2012-2997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224208 44674 CVE-2012-2997 20130122 SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability  View
224209 44674 CVE-2012-2997 http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14138.html  View
224210 44674 CVE-2012-2997 57496  View
224211 44674 CVE-2012-2997 f5bigip-xml-info-disclosure(81426)  View
224212 44674 CVE-2012-2997 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-0_F5_BIG-IP_XML_External_Entity_Injection_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30413 JVNDB-2012-006121 F5 BIG-IP の sam/admin/vpe2/public/php/server.php における XML 外部エンティティの脆弱性 F5 BIG-IP の sam/admin/vpe2/public/php/server.php には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2012-2997 56235 CVE-2012-2997 44674 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006121.html 2012-09-03 2014-01-23 View