CVE-2012-5881 in Oracle Utilities Frameworkinfo

Summary

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/16/2012

Disclosure

11/16/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
100142Oracle Utilities Framework UI cross site scripting79Not definedOfficial fixCVE-2012-5881
62926Yahoo! YUI charts.swf cross site scripting79Not definedNot definedCVE-2012-5881

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸