CVE-2012-2662
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
CVE-2012-2662- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
CVE-2012-2662- Updated
- 2026-11-02
EUVDEUVD-2012-2645 No score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
EUVD-2012-2645- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4x57-6h7g-39hp No score
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
- Record
GHSA-4x57-6h7g-39hp- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pki-commonRed Hat:certificate_system:8::el5 |
before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-common-javadocRed Hat:certificate_system:8::el5 |
before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-tpsRed Hat:certificate_system:8::el5 |
before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-utilRed Hat:certificate_system:8::el5 |
before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-util-javadocRed Hat:certificate_system:8::el5 |
before 0:8.1.1-1.el5pki | 0:8.1.1-1.el5pki |
pki-caRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pki-java-toolsRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::client |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::computenode |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::server |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-common-javadocRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-tools-javadocRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-util-javadocRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-caRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-commonRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-coreRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-core-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-java-toolsRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-native-toolsRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-selinuxRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-setupRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-silentRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-symkeyRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
pki-utilRed Hat:enterprise_linux:6::workstation |
before 0:9.0.3-43.el6 | 0:9.0.3-43.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2662 is a medium vulnerability (CVSS 4.3) in Redhat Certificate System, published August 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. Fixed in pki-common 0:8.1.1-1.el5pki.
References
securitytracker.com/id?1027284
exchange.xforce.ibmcloud.com/vulnerabilities/77101
rhn.redhat.com/errata/RHSA-2015-1347.html
secunia.com/advisories/50013
osvdb.org/84099
securityfocus.com/bid/54608
Show 19 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-2662
access.redhat.com/errata/RHSA-2012:1103
bugzilla.redhat.com/show_bug.cgi?id=826646
github.com/advisories/GHSA-4x57-6h7g-39hp
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1103.json
cve.org/CVERecord?id=CVE-2012-2662