CVE-2012-2552
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server...
CVE-2012-2552 is a medium vulnerability (CVSS 4.3) in Microsoft Sql Server, published October 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.3%, the 97th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 16.3%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
- Record
CVE-2012-2552- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
- Record
CVE-2012-2552- Updated
- 2026-11-02
EUVDEUVD-2012-2538No score
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
- Record
EUVD-2012-2538- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w5x2-fgv5-g2x7No score
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server...
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
- Record
GHSA-w5x2-fgv5-g2x7- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-070
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15395
us-cert.gov/cas/techalerts/TA12-283A.html
securityfocus.com/bid/55783
nvd.nist.gov/vuln/detail/CVE-2012-2552
github.com/advisories/GHSA-w5x2-fgv5-g2x7