« Volver al listado

CVE-2012-4848

Estado: ModificadaBaja (3.5)—

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Lotus Foundations Start

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4848",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-19T11:55:54.797",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21620319",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79537",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21620319",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79537",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en IBM Lotus Foundations Start antes de v1.2.2c permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de un campo de atributo de usuario de WebConfig Users, tal y como se demostró por el campo  (1) First Name o (2) Last Name.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:45:47.193",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:lotus_foundations_start:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E1F81193-D7BC-4A4B-8CF8-38E444CE08AB",
              "versionEndIncluding": "1.2.2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_foundations_start:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "274B15AA-511C-42C8-A60F-689985566418"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_foundations_start:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2F257A9-7EE0-4A48-98BA-BCD13A2F2F90"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_foundations_start:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98BA3D48-4DEC-49BA-A9C2-14673317DB8C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}