CVE-2012-2536

Description

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

http://www.securityfocus.com/bid/55430

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3