Vulnerability Details CVE-2012-4451
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://framework.zend.com/security/advisory/ZF2012-03
- http://seclists.org/oss-sec/2012/q3/571
- http://seclists.org/oss-sec/2012/q3/573
- http://www.securityfocus.com/bid/55636
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10
- https://bugs.gentoo.org/show_bug.cgi?id=436210
- https://bugzilla.redhat.com/show_bug.cgi?id=860738
- https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733
- http://framework.zend.com/security/advisory/ZF2012-03
- http://seclists.org/oss-sec/2012/q3/571
- http://seclists.org/oss-sec/2012/q3/573
- http://www.securityfocus.com/bid/55636
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10
- https://bugs.gentoo.org/show_bug.cgi?id=436210
- https://bugzilla.redhat.com/show_bug.cgi?id=860738
- https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733
Products affected by CVE-2012-4451
-
cpe:2.3:a:zend:zend_framework:1.0.0
-
cpe:2.3:a:zend:zend_framework:1.0.1
-
cpe:2.3:a:zend:zend_framework:1.0.2
-
cpe:2.3:a:zend:zend_framework:1.0.3
-
cpe:2.3:a:zend:zend_framework:1.0.4
-
cpe:2.3:a:zend:zend_framework:1.10.0
-
cpe:2.3:a:zend:zend_framework:1.10.1
-
cpe:2.3:a:zend:zend_framework:1.10.2
-
cpe:2.3:a:zend:zend_framework:1.10.3
-
cpe:2.3:a:zend:zend_framework:1.10.4
-
cpe:2.3:a:zend:zend_framework:1.10.5
-
cpe:2.3:a:zend:zend_framework:1.10.6
-
cpe:2.3:a:zend:zend_framework:1.10.7
-
cpe:2.3:a:zend:zend_framework:1.10.8
-
cpe:2.3:a:zend:zend_framework:1.10.9
-
cpe:2.3:a:zend:zend_framework:1.11.0
-
cpe:2.3:a:zend:zend_framework:1.11.1
-
cpe:2.3:a:zend:zend_framework:1.11.10
-
cpe:2.3:a:zend:zend_framework:1.11.11
-
cpe:2.3:a:zend:zend_framework:1.11.12
-
cpe:2.3:a:zend:zend_framework:1.11.13
-
cpe:2.3:a:zend:zend_framework:1.11.15
-
cpe:2.3:a:zend:zend_framework:1.11.2
-
cpe:2.3:a:zend:zend_framework:1.11.3
-
cpe:2.3:a:zend:zend_framework:1.11.4
-
cpe:2.3:a:zend:zend_framework:1.11.5
-
cpe:2.3:a:zend:zend_framework:1.11.6
-
cpe:2.3:a:zend:zend_framework:1.11.7
-
cpe:2.3:a:zend:zend_framework:1.11.8
-
cpe:2.3:a:zend:zend_framework:1.11.9
-
cpe:2.3:a:zend:zend_framework:1.12.0
-
cpe:2.3:a:zend:zend_framework:1.12.1
-
cpe:2.3:a:zend:zend_framework:1.12.10
-
cpe:2.3:a:zend:zend_framework:1.12.11
-
cpe:2.3:a:zend:zend_framework:1.12.12
-
cpe:2.3:a:zend:zend_framework:1.12.13
-
cpe:2.3:a:zend:zend_framework:1.12.14
-
cpe:2.3:a:zend:zend_framework:1.12.15
-
cpe:2.3:a:zend:zend_framework:1.12.16
-
cpe:2.3:a:zend:zend_framework:1.12.17
-
cpe:2.3:a:zend:zend_framework:1.12.18
-
cpe:2.3:a:zend:zend_framework:1.12.19
-
cpe:2.3:a:zend:zend_framework:1.12.2
-
cpe:2.3:a:zend:zend_framework:1.12.20
-
cpe:2.3:a:zend:zend_framework:1.12.3
-
cpe:2.3:a:zend:zend_framework:1.12.4
-
cpe:2.3:a:zend:zend_framework:1.12.5
-
cpe:2.3:a:zend:zend_framework:1.12.6
-
cpe:2.3:a:zend:zend_framework:1.12.7
-
cpe:2.3:a:zend:zend_framework:1.12.8
-
cpe:2.3:a:zend:zend_framework:1.12.9
-
cpe:2.3:a:zend:zend_framework:1.5.0
-
cpe:2.3:a:zend:zend_framework:1.5.1
-
cpe:2.3:a:zend:zend_framework:1.5.2
-
cpe:2.3:a:zend:zend_framework:1.5.3
-
cpe:2.3:a:zend:zend_framework:1.6.0
-
cpe:2.3:a:zend:zend_framework:1.6.1
-
cpe:2.3:a:zend:zend_framework:1.6.2
-
cpe:2.3:a:zend:zend_framework:1.7.0
-
cpe:2.3:a:zend:zend_framework:1.7.1
-
cpe:2.3:a:zend:zend_framework:1.7.2
-
cpe:2.3:a:zend:zend_framework:1.7.3
-
cpe:2.3:a:zend:zend_framework:1.7.4
-
cpe:2.3:a:zend:zend_framework:1.7.5
-
cpe:2.3:a:zend:zend_framework:1.7.6
-
cpe:2.3:a:zend:zend_framework:1.7.7
-
cpe:2.3:a:zend:zend_framework:1.7.8
-
cpe:2.3:a:zend:zend_framework:1.7.9
-
cpe:2.3:a:zend:zend_framework:1.8.0
-
cpe:2.3:a:zend:zend_framework:1.8.1
-
cpe:2.3:a:zend:zend_framework:1.8.2
-
cpe:2.3:a:zend:zend_framework:1.8.3
-
cpe:2.3:a:zend:zend_framework:1.8.4
-
cpe:2.3:a:zend:zend_framework:1.8.5
-
cpe:2.3:a:zend:zend_framework:1.9.0
-
cpe:2.3:a:zend:zend_framework:1.9.1
-
cpe:2.3:a:zend:zend_framework:1.9.2
-
cpe:2.3:a:zend:zend_framework:1.9.3
-
cpe:2.3:a:zend:zend_framework:1.9.4
-
cpe:2.3:a:zend:zend_framework:1.9.5
-
cpe:2.3:a:zend:zend_framework:1.9.6
-
cpe:2.3:a:zend:zend_framework:1.9.7
-
cpe:2.3:a:zend:zend_framework:1.9.8
-
cpe:2.3:a:zend:zend_framework:2.0.0
-
cpe:2.3:o:fedoraproject:fedora:16
-
cpe:2.3:o:fedoraproject:fedora:17
-
cpe:2.3:o:redhat:enterprise_linux:6.0