CVE-2012-4889

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

7.72% chance of exploitation in the next 30 days, 94th percentile

Nuclei

medium · CWE-79

Published

2012-09-10

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4889.yaml

ExploitDB entries (5)

• https://www.exploit-db.com/exploits/37032
• https://www.exploit-db.com/exploits/37031
• https://www.exploit-db.com/exploits/37030
• https://www.exploit-db.com/exploits/37029
• https://www.exploit-db.com/exploits/35933

References

• CVE Record
• NVD entry

Related

• CVE-2012-4886
• CVE-2012-4891
• CVE-2012-4878
• CVE-2012-4901
• CVE-2012-4877
• CVE-2012-4902