Every CVE Search/ Get API key

CVE-2012-4543

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...

4.3 MediumFix available

CVE-2012-4543 is a medium vulnerability (CVSS 4.3) in Redhat Certificate System, published January 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 68th percentile. Fixed in pki-common 0:8.1.3-2.el5pki.

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Exploit likelihood

1.23%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Record
CVE-2012-4543
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Record
CVE-2012-4543
Updated
2026-11-02
EUVDEUVD-2012-4471 No score

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Record
EUVD-2012-4471
Updated
2026-11-03
GitHub AdvisoriesGHSA-3rg2-g53j-xh7w No score

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Record
GHSA-3rg2-g53j-xh7w
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pki-common
Red Hat:certificate_system:8::el5
 before 0:8.1.3-2.el5pki
0:8.1.3-2.el5pki
pki-common-javadoc
Red Hat:certificate_system:8::el5
 before 0:8.1.3-2.el5pki
0:8.1.3-2.el5pki
pki-tps
Red Hat:certificate_system:8::el5
 before 0:8.1.3-2.el5pki
0:8.1.3-2.el5pki
pki-ca
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common-javadoc
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools-javadoc
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
Show 49 moreShow less
Affected packages
PackageAffectedFixed
pki-native-tools
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-selinux
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-setup
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-silent
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-symkey
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util-javadoc
Red Hat:enterprise_linux:6::client
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-ca
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common-javadoc
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools-javadoc
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-native-tools
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-selinux
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-setup
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-silent
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-symkey
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util-javadoc
Red Hat:enterprise_linux:6::computenode
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common-javadoc
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools-javadoc
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util-javadoc
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-ca
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-native-tools
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-selinux
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-setup
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-silent
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-symkey
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util
Red Hat:enterprise_linux:6::server
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-ca
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-common
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-core-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-java-tools
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-native-tools
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-selinux
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-setup
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-silent
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-symkey
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6
pki-util
Red Hat:enterprise_linux:6::workstation
 before 0:9.0.3-30.el6
0:9.0.3-30.el6

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open