NVD

Id
47296  
Name
CVE-2012-6620  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-01-16  
Modified Date
2016-12-07  
Seq
2012-6620  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236459 47296 CVE-2012-6620 http://bugs.horde.org/ticket/11189  View
236460 47296 CVE-2012-6620 [announce] 20120514 Kronolith H4 (3.0.17) (final)  View
236461 47296 CVE-2012-6620 53731  View
236462 47296 CVE-2012-6620 kronolith-kronolith-xss(75563)  View
236463 47296 CVE-2012-6620 https://github.com/horde/horde/commit/1228a6825a8dab3333d0a8c8986fc10d1f3d11b2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30400 JVNDB-2012-006108 Horde Kronolith H4 のタスクおよび検索ビューにおけるクロスサイトスクリプティングの脆弱性 Horde Kronolith H4 の (1) タスクおよび (2) 検索ビューには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6620 59858 CVE-2012-6620 47296 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006108.html 2012-05-12 2014-01-20 View