« Volver al listado

CVE-2012-0246

Estado: ModificadaAlta (9.3)—

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ecava — Integraxor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0246",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-04-02T10:46:44.263",
  "references": [
    {
      "url": "http://osvdb.org/80650",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/48558",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74388",
      "source": "cret@cert.org"
    },
    {
      "url": "http://osvdb.org/80650",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48558",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74388",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en un control ActiveX no determinado en Ecava IntegraXor anterior a v3.71.4200, permite a atacantes remotos ejecutar comandos al utilizar vectores que implican un documento HTML en el servidor."
    }
  ],
  "lastModified": "2026-06-16T23:36:58.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FA7AB75-A8CB-4568-BD4F-8F77E1EC7EAE",
              "versionEndIncluding": "3.60.4061"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.5.3900.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "024F3AE4-4912-4C4C-859E-3CC832123394"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.5.3900.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E4BEE8F-B1FC-47E0-BF7F-3247A29CCBFF"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.6.4000.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0EB4452-4772-4CA9-A119-A8DFE183CB87"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "819964C6-6562-4186-B02F-D275385DED0F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}