« Volver al listado

CVE-2012-3238

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Astaro — Security GatewayAstaro — Security Gateway SoftwareSophos — Unified Threat ManagementSophos — Unified Threat Management Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3238",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-09T22:55:01.197",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://security.inshell.net/advisory/27",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.astaro.com/en-uk/blog/up2date/8305",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.inshell.net/advisory/27",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.astaro.com/en-uk/blog/up2date/8305",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the \"Comment (optional)\" field."
    },
    {
      "lang": "es",
      "value": "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el componente Backup/Restore en WebAdmin en Astaro Security Gateway anteriores a v8.305, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del campo \"Comment (opcional)\"."
    }
  ],
  "lastModified": "2026-06-16T23:42:50.520",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:astaro:security_gateway_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "420C1976-6941-4155-A253-0F4CF42254D0",
              "versionEndIncluding": "8.3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:astaro:security_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92DE340A-A359-42F6-98FC-5105637C1DEF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A220989E-3634-4CF9-B1A0-75260DDF4121",
              "versionEndIncluding": "8.3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:110:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9D7BF2E-1DEB-474A-8DEE-0A2D1A9B1A77"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:120:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE59783E-6A2D-4777-9BA2-8527DA6B32BA"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:220:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "646FEB9F-2F54-4946-9687-C2EC28144C97"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:320:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57654458-F143-4D70-9D52-0A242F3177A1"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:425:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6527EC0-536E-4BF0-9949-8FA4A4E64688"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:525:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21A9EA52-E9F1-4267-86BC-570ED1ECC7B1"
            },
            {
              "criteria": "cpe:2.3:h:sophos:unified_threat_management:625:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "280976E2-D7A8-43B7-A57C-66920BC91DAB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}