CVE-2012-2872
Status: ModifiedMedium (4.3)—
Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.08%
- Percentile among all scored CVEs: 64
- Score date: 10/12/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-79
References
- http://code.google.com/p/chromium/issues/detail?id=142956
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
- http://osvdb.org/85037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78181
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15853
- http://code.google.com/p/chromium/issues/detail?id=142956
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
- http://osvdb.org/85037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78181
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15853
Raw JSON (NVD)
Show
{
"id": "CVE-2012-2872",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "chrome-cve-admin@google.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-08-31T19:55:01.183",
"references": [
{
"url": "http://code.google.com/p/chromium/issues/detail?id=142956",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://osvdb.org/85037",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78181",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15853",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://code.google.com/p/chromium/issues/detail?id=142956",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/85037",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78181",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15853",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
},
{
"lang": "es",
"value": "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en una página SSL intersticial en Google Chrome antes de v21.0.1180.89 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados.\r\n"
}
],
"lastModified": "2026-06-16T23:42:15.440",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D806A17E-B8F9-466D-807D-3F1E77603DC8"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E9EB400-8080-4519-ADE0-DF99113483AE",
"versionEndIncluding": "21.0.1180.88"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "767C0C1A-EAC4-4F98-9E80-CFDA5069F118"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E2554F0-0DEB-41A0-A595-6A524F9EC001"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F542051-CEED-45A4-BB83-937069D07CB2"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC926FFC-EF03-46F0-B5B5-02B34571D6C4"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24849FF0-F873-4365-9B82-F16AD7F4A291"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E784307-0538-4524-94EA-A88B1ABD0E2E"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5655EFE7-69CB-469F-A00A-D6F3F7F492E4"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3B22D68-9E32-4566-8ED1-F1CE87903F98"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40DB1183-DFF5-4251-BCDF-2F7696ABBFA0"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BD5341A-E508-4E5B-B03F-677D97E5A464"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E096479F-4C69-445A-8C2B-7201896F401B"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25756B8C-FBEB-4D7F-99E6-EA7D27B07B39"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41371794-2083-4188-90BE-506419DC0B82"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51FF3E52-3E8E-4D2F-ABA3-B7D83219D723"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "981570FA-6B44-49A8-9C9B-7D5127E90F6C"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36D2B7FE-2B20-47CA-9B3C-B726E21659E8"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "858BDFA4-E9CB-4537-ABA7-4283318CA501"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76D0CD04-8EF4-4B6A-BD4F-1DFCDDDD4DED"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E912B5D-81F3-4A93-A0E6-B1CFDE2B46EE"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B578A2BC-9360-428C-9AFE-DC9DB9E0A621"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DCB6048-5A18-4FD6-A21B-95B595CF943C"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28882288-859D-425C-8BA3-F46D058B61D6"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "444AD7BB-FE0B-4A51-BA89-EE2647F4E8AE"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0692DD3-562D-4BE7-BB61-1549EFFF9CD5"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FF70696-70A8-4DFA-A0C3-172A103F3F24"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25241621-CBB0-4E39-B901-2F70EE476722"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1355883C-C184-46C1-9CF7-AA59B0FC61B7"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB090D01-9F7E-49CF-8356-80CC03999121"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A37AB354-581C-42CA-B8E9-9AEAC0B326AF"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "885EFC87-061C-4EEF-880A-68D7D53BACDA"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D58B0932-1DF3-4308-8D82-B20564E974F8"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8FAD1E6-788F-4295-BFD2-F3CE99B14934"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF8AB897-7A45-4360-AFA7-EB7C8690ADD9"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EF0FA83-C464-4270-A4E8-1441DF4ECFAD"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86B70015-F651-467C-A846-5C97772D91EA"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C07A549D-48EF-434C-ABBA-0FF7078060D7"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B573E86E-3512-4DB9-911E-1B27A3BB69DC"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.74:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2BDB997-D125-4B5D-9680-9AED7D89FD0A"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BAF7E49-6795-4848-AADD-40D8B2D5F5BA"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7B244B3-86E0-4E1D-96A5-E0B9B50F2ADB"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.77:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0FF1C67-9CB7-4C78-9F3C-C88AB5A6284D"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.78:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3371BBF5-0B82-4005-96AE-9B604A2FA70B"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.79:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5916EA0D-D763-4650-9AC4-A38C6E8EB052"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.80:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "443C5B0F-8FC6-40E3-AA95-BB8884176002"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CEE1054-F275-4C04-9F1E-994AD053827A"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.82:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA50A727-8EBA-4E97-A003-FAA2258D9128"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.83:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEFF35D2-661A-4FCC-AB31-D354D1F204F9"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.84:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "150E8749-5A22-4834-A165-1F9FAFE3F91D"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.85:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF534291-1F7A-486D-9574-CA9E734DBC6E"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.86:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9ACB74A-3F0C-44FE-BC9D-4993AD58064F"
},
{
"criteria": "cpe:2.3:a:google:chrome:21.0.1180.87:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1BF669C-3DAD-46B6-B2B9-A226CAC7B0D8"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "chrome-cve-admin@google.com"
}