CVE-2012-3557
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote...
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
- Record
CVE-2012-3557- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
- Record
CVE-2012-3557- Updated
- 2026-11-02
EUVDEUVD-2012-3504 No score
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
- Record
EUVD-2012-3504- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5866-mfc4-q5hx No score
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote...
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
- Record
GHSA-5866-mfc4-q5hx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3557 is a medium vulnerability (CVSS 5.0) in Opera Browser, published June 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. No source names a fixed version.