CVE-2012-2662
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...
CVE-2012-2662 is a medium vulnerability (CVSS 4.3) in Redhat Certificate System, published August 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. Fixed in pki-ca 0:9.0.3-43.el6.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.37%EPSS, 72nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:9.0.3-43.el6pki-ca +60 more
Description
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pki-commonRed Hat:certificate_system:8::el5 From an advisory covering 2 CVEs | before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-common-javadocRed Hat:certificate_system:8::el5 From an advisory covering 2 CVEs | before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-tpsRed Hat:certificate_system:8::el5 From an advisory covering 2 CVEs | before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-utilRed Hat:certificate_system:8::el5 From an advisory covering 2 CVEs | before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-util-javadocRed Hat:certificate_system:8::el5 From an advisory covering 2 CVEs | before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-caRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pki-java-toolsRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::client | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::computenode | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::server | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::workstation | before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
CVE-2012-2662- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
CVE-2012-2662- Updated
- 2026-11-02
EUVDEUVD-2012-2645No score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
EUVD-2012-2645- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4x57-6h7g-39hpNo score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
GHSA-4x57-6h7g-39hp- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1027284
exchange.xforce.ibmcloud.com/vulnerabilities/77101
rhn.redhat.com/errata/RHSA-2015-1347.html
secunia.com/advisories/50013
osvdb.org/84099
securityfocus.com/bid/54608
Show 19 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-2662
access.redhat.com/errata/RHSA-2012:1103
bugzilla.redhat.com/show_bug.cgi?id=826646
github.com/advisories/GHSA-4x57-6h7g-39hp
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1103.json
cve.org/CVERecord?id=CVE-2012-2662