CVE-2012-2683
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...
4.3 MediumFix available
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."
Exploit likelihood
2.08%Up 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."
- Record
CVE-2012-2683- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."
- Record
CVE-2012-2683- Updated
- 2026-11-02
EUVDEUVD-2012-2665 No score
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."
- Record
EUVD-2012-2665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgxg-4v48-cv79 No score
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."
- Record
GHSA-rgxg-4v48-cv79- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-aviaryRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-classadsRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-kbddRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-vm-gahpRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.22.el5 | 0:7.6.5-0.22.el5 |
condor-wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:4.1.3-1.el5 | 0:4.1.3-1.el5 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2::el5 |
before 0:1.23-1.el5 | 0:1.23-1.el5 |
condor-wallaby-clientRed Hat:enterprise_mrg:2::el5 |
before 0:4.1.3-1.el5 | 0:4.1.3-1.el5 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-wallaby-toolsRed Hat:enterprise_mrg:2::el5 |
before 0:4.1.3-1.el5 | 0:4.1.3-1.el5 |
cuminRed Hat:enterprise_mrg:2::el5 |
before 0:0.1.5444-3.el5 | 0:0.1.5444-3.el5 |
python-wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:0.12.5-10.el5 | 0:0.12.5-10.el5 |
python-wallabyclientRed Hat:enterprise_mrg:2::el5 |
before 0:4.1.3-1.el5 | 0:4.1.3-1.el5 |
ruby-wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:0.12.5-10.el5 | 0:0.12.5-10.el5 |
sesameRed Hat:enterprise_mrg:2::el5 |
before 0:1.0-4.el5 | 0:1.0-4.el5 |
sesame-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:1.0-4.el5 | 0:1.0-4.el5 |
wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:0.12.5-10.el5 | 0:0.12.5-10.el5 |
wallaby-utilsRed Hat:enterprise_mrg:2::el5 |
before 0:0.12.5-10.el5 | 0:0.12.5-10.el5 |
condorRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-classadsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-kbddRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-qmfRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-wallabyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.23-1.el6 | 0:1.23-1.el6 |
condor-wallaby-clientRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
condor-wallaby-toolsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
python-wallabyclientRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
ruby-wallabyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
rubygem-rakeRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.8.7-2.1.el6 | 0:0.8.7-2.1.el6 |
rubygemsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.8.16-1.el6 | 0:1.8.16-1.el6 |
wallabyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
wallaby-utilsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
sesameRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.0-6.el6 | 0:1.0-6.el6 |
sesame-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.0-6.el6 | 0:1.0-6.el6 |
condorRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-aviaryRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-classadsRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-cluster-resource-agentRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-deltacloud-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-kbddRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-plumageRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.22.el6 | 0:7.6.5-0.22.el6 |
condor-wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.23-1.el6 | 0:1.23-1.el6 |
condor-wallaby-clientRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
condor-wallaby-toolsRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
cuminRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.1.5444-3.el6 | 0:0.1.5444-3.el6 |
deltacloud-coreRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.5.0-10.el6_2 | 0:0.5.0-10.el6_2 |
deltacloud-core-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.5.0-10.el6_2 | 0:0.5.0-10.el6_2 |
deltacloud-core-rhevmRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.5.0-10.el6_2 | 0:0.5.0-10.el6_2 |
libdeltacloudRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.9-1.el6 | 0:0.9-1.el6 |
libdeltacloud-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.9-1.el6 | 0:0.9-1.el6 |
libdeltacloud-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.9-1.el6 | 0:0.9-1.el6 |
python-wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
python-wallabyclientRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1.3-1.el6 | 0:4.1.3-1.el6 |
ruby-hpricotRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.8.4-2.el6 | 0:0.8.4-2.el6 |
ruby-jsonRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.4.6-10.el6 | 0:1.4.6-10.el6 |
ruby-nokogiriRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5.0-0.8.beta4.el6 | 0:1.5.0-0.8.beta4.el6 |
ruby-wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
rubygem-daemonsRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.1.4-2.el6 | 0:1.1.4-2.el6 |
rubygem-eventmachineRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.10-7.el6 | 0:0.12.10-7.el6 |
rubygem-eventmachine-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.10-7.el6 | 0:0.12.10-7.el6 |
rubygem-fssmRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.2.7-1.el6 | 0:0.2.7-1.el6 |
rubygem-hamlRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.1.2-2.el6 | 0:3.1.2-2.el6 |
rubygem-hpricotRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.8.4-2.el6 | 0:0.8.4-2.el6 |
rubygem-hpricot-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.8.4-2.el6 | 0:0.8.4-2.el6 |
rubygem-hpricot-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.8.4-2.el6 | 0:0.8.4-2.el6 |
rubygem-jsonRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.4.6-10.el6 | 0:1.4.6-10.el6 |
rubygem-json-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.4.6-10.el6 | 0:1.4.6-10.el6 |
rubygem-marukuRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.6.0-4.el6 | 0:0.6.0-4.el6 |
rubygem-mime-typesRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.16-4.el6_0 | 0:1.16-4.el6_0 |
rubygem-mime-types-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.16-4.el6_0 | 0:1.16-4.el6_0 |
rubygem-mochaRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.9.7-4.el6 | 0:0.9.7-4.el6 |
rubygem-net-sshRed Hat:enterprise_mrg:2:server:el6 |
before 0:2.0.23-6.el6_0 | 0:2.0.23-6.el6_0 |
rubygem-net-ssh-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:2.0.23-6.el6_0 | 0:2.0.23-6.el6_0 |
rubygem-nokogiriRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5.0-0.8.beta4.el6 | 0:1.5.0-0.8.beta4.el6 |
rubygem-nokogiri-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5.0-0.8.beta4.el6 | 0:1.5.0-0.8.beta4.el6 |
rubygem-nokogiri-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5.0-0.8.beta4.el6 | 0:1.5.0-0.8.beta4.el6 |
rubygem-rackRed Hat:enterprise_mrg:2:server:el6 |
before 1:1.3.0-2.el6 | 1:1.3.0-2.el6 |
rubygem-rack-acceptRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.4.3-6.el6_0 | 0:0.4.3-6.el6_0 |
rubygem-rack-accept-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.4.3-6.el6_0 | 0:0.4.3-6.el6_0 |
rubygem-rack-testRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.6.1-1.el6 | 0:0.6.1-1.el6 |
rubygem-rakeRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.8.7-2.1.el6 | 0:0.8.7-2.1.el6 |
rubygem-rest-clientRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.6.1-2.el6_0 | 0:1.6.1-2.el6_0 |
rubygem-sassRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.1.4-4.el6 | 0:3.1.4-4.el6 |
rubygem-sass-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.1.4-4.el6 | 0:3.1.4-4.el6 |
rubygem-sinatraRed Hat:enterprise_mrg:2:server:el6 |
before 1:1.2.6-2.el6 | 1:1.2.6-2.el6 |
rubygem-syntaxRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.0.0-4.el6 | 0:1.0.0-4.el6 |
rubygem-thinRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2.11-3.el6 | 0:1.2.11-3.el6 |
rubygem-thin-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2.11-3.el6 | 0:1.2.11-3.el6 |
rubygem-thin-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2.11-3.el6 | 0:1.2.11-3.el6 |
rubygem-tiltRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.3.2-3.el6 | 0:1.3.2-3.el6 |
rubygem-tilt-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.3.2-3.el6 | 0:1.3.2-3.el6 |
rubygem-yardRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.7.2-1.el6 | 0:0.7.2-1.el6 |
rubygemsRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.8.16-1.el6 | 0:1.8.16-1.el6 |
sesameRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.0-6.el6 | 0:1.0-6.el6 |
sesame-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.0-6.el6 | 0:1.0-6.el6 |
wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
wallaby-utilsRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.12.5-10.el6 | 0:0.12.5-10.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2683 is a medium vulnerability (CVSS 4.3) in Trevor Mckay Cumin, published September 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in condor 0:7.6.5-0.22.el5.
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830243
lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.html
securityfocus.com/bid/55618
rhn.redhat.com/errata/RHSA-2012-1278.html
secunia.com/advisories/50660
Show 67 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/78772
nvd.nist.gov/vuln/detail/CVE-2012-2683
access.redhat.com/errata/RHSA-2012:1278
github.com/advisories/GHSA-rgxg-4v48-cv79
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1278.json
cve.org/CVERecord?id=CVE-2012-2680