NVD

Id
45374  
Name
CVE-2012-3835  
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2012-07-17  
Seq
2012-3835  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227810 45374 CVE-2012-3835 http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html  View
227811 45374 CVE-2012-3835 18800  View
227812 45374 CVE-2012-3835 http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt  View
227813 45374 CVE-2012-3835 53331  View
227814 45374 CVE-2012-3835 alienvault-multiple-xss(75297)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27288 JVNDB-2012-002995 AlienVault の OSSIM におけるクロスサイトスクリプティングの脆弱性 AlienVault Open Source Security Information Management (OSSIM) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3835 57073 CVE-2012-3835 45374 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002995.html 2012-07-03 2012-07-05 View