Every CVE Search/ Get API key

CVE-2012-2683

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...

4.3 Medium

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."

Exploit likelihood

2.08%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."

Record
CVE-2012-2683
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."

Record
CVE-2012-2683
Updated
2026-11-02
EUVDEUVD-2012-2665 No score

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."

Record
EUVD-2012-2665
Updated
2026-11-03
GitHub AdvisoriesGHSA-rgxg-4v48-cv79 No score

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages."

Record
GHSA-rgxg-4v48-cv79
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-aviary
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-classads
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-debuginfo
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-kbdd
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-qmf
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-vm-gahp
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-wallaby
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
condor-wallaby-base-db
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:1.23-1.el5
0:1.23-1.el5
condor-wallaby-client
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
Show 94 moreShow less
Affected packages
PackageAffectedFixed
condor-wallaby-tools
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
cumin
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:0.1.5444-3.el5
0:0.1.5444-3.el5
python-wallaby
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
python-wallabyclient
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
ruby-wallaby
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
sesame
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:1.0-4.el5
0:1.0-4.el5
sesame-debuginfo
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:1.0-4.el5
0:1.0-4.el5
wallaby
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
wallaby-utils
Red Hat:enterprise_mrg:2::el5
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
condor
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-classads
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-kbdd
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-qmf
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-wallaby
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:1.23-1.el6
0:1.23-1.el6
condor-wallaby-client
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-tools
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
python-wallabyclient
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
rubygem-rake
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:0.8.7-2.1.el6
0:0.8.7-2.1.el6
rubygems
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:1.8.16-1.el6
0:1.8.16-1.el6
wallaby
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
wallaby-utils
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
sesame
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:1.0-6.el6
0:1.0-6.el6
sesame-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 11 CVEs
 before 0:1.0-6.el6
0:1.0-6.el6
condor
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-aviary
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-classads
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-cluster-resource-agent
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-deltacloud-gahp
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-kbdd
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-plumage
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-qmf
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-wallaby
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.23-1.el6
0:1.23-1.el6
condor-wallaby-client
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-tools
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
cumin
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.1.5444-3.el6
0:0.1.5444-3.el6
deltacloud-core
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
deltacloud-core-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
deltacloud-core-rhevm
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
libdeltacloud
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.9-1.el6
0:0.9-1.el6
libdeltacloud-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.9-1.el6
0:0.9-1.el6
libdeltacloud-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.9-1.el6
0:0.9-1.el6
python-wallaby
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
python-wallabyclient
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
ruby-hpricot
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
ruby-json
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
ruby-nokogiri
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
rubygem-daemons
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.1.4-2.el6
0:1.1.4-2.el6
rubygem-eventmachine
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.10-7.el6
0:0.12.10-7.el6
rubygem-eventmachine-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.10-7.el6
0:0.12.10-7.el6
rubygem-fssm
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.2.7-1.el6
0:0.2.7-1.el6
rubygem-haml
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:3.1.2-2.el6
0:3.1.2-2.el6
rubygem-hpricot
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-hpricot-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-hpricot-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-json
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
rubygem-json-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
rubygem-maruku
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.6.0-4.el6
0:0.6.0-4.el6
rubygem-mime-types
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.16-4.el6_0
0:1.16-4.el6_0
rubygem-mime-types-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.16-4.el6_0
0:1.16-4.el6_0
rubygem-mocha
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.9.7-4.el6
0:0.9.7-4.el6
rubygem-net-ssh
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:2.0.23-6.el6_0
0:2.0.23-6.el6_0
rubygem-net-ssh-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:2.0.23-6.el6_0
0:2.0.23-6.el6_0
rubygem-nokogiri
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-nokogiri-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-nokogiri-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-rack
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 1:1.3.0-2.el6
1:1.3.0-2.el6
rubygem-rack-accept
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.4.3-6.el6_0
0:0.4.3-6.el6_0
rubygem-rack-accept-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.4.3-6.el6_0
0:0.4.3-6.el6_0
rubygem-rack-test
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
rubygem-rake
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.8.7-2.1.el6
0:0.8.7-2.1.el6
rubygem-rest-client
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.6.1-2.el6_0
0:1.6.1-2.el6_0
rubygem-sass
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:3.1.4-4.el6
0:3.1.4-4.el6
rubygem-sass-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:3.1.4-4.el6
0:3.1.4-4.el6
rubygem-sinatra
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 1:1.2.6-2.el6
1:1.2.6-2.el6
rubygem-syntax
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.0.0-4.el6
0:1.0.0-4.el6
rubygem-thin
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-thin-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-thin-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-tilt
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.3.2-3.el6
0:1.3.2-3.el6
rubygem-tilt-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.3.2-3.el6
0:1.3.2-3.el6
rubygem-yard
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.7.2-1.el6
0:0.7.2-1.el6
rubygems
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.8.16-1.el6
0:1.8.16-1.el6
sesame
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.0-6.el6
0:1.0-6.el6
sesame-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:1.0-6.el6
0:1.0-6.el6
wallaby
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
wallaby-utils
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 11 CVEs
 before 0:0.12.5-10.el6
0:0.12.5-10.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2683 is a medium vulnerability (CVSS 4.3) in Trevor Mckay Cumin, published September 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. No source names a fixed version.

References

Show 67 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open