CVE-2012-3790

Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5...

4.3 Medium

CVE-2012-3790 is a medium vulnerability (CVSS 4.3) in Adiscon Loganalyzer, published June 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search action.

Exploit likelihood

1.23%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2012-3790
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3790
Updated: 2026-11-02

EUVDEUVD-2012-3737 No score

Record: EUVD-2012-3737
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4w9g-pm86-x297 No score

Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5...

Record: GHSA-4w9g-pm86-x297
Weakness: CWE-79
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-3790 No score

Record: UBUNTU-CVE-2012-3790
Updated: 2026-11-02

Affected products

adiscon loganalyzer

Affected packages

Affected packages
Package	Affected	Fixed
`loganalyzer` Ubuntu:16.04:LTS	All versions, plus listed versions 3.6.6+dfsg-23.6.6+dfsg-2ubuntu13.6.6+dfsg-2ubuntu1.1	None known
`loganalyzer` Ubuntu:18.04:LTS	All versions, plus listed versions 4.1.5+dfsg-2	None known
`loganalyzer` Ubuntu:20.04:LTS	All versions, plus listed versions 4.1.5+dfsg-2	None known
`loganalyzer` Ubuntu:22.04:LTS	All versions, plus listed versions 4.1.5+dfsg-2.1	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

Exploit likelihood

What each source reports

Affected products

Affected packages

History

References