CVE-2012-6662

CVSS V2 Medium 4.3 CVSS V3 None
Description
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Overview
  • CVE ID
  • CVE-2012-6662
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2014-11-24T16:59:01
  • Last Modified Date
  • 2018-07-14T01:29:00
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:jqueryui:jquery_ui:1.10.0:rc1:*:*:*:jquery:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde Patch Issue Tracking Third Party Advisory
https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e Patch Issue Tracking Third Party Advisory
http://bugs.jqueryui.com/ticket/8861 Issue Tracking Vendor Advisory
http://seclists.org/oss-sec/2014/q4/616 Third Party Advisory VDB Entry
http://seclists.org/oss-sec/2014/q4/613 Third Party Advisory VDB Entry
http://bugs.jqueryui.com/ticket/8859 Issue Tracking Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-0442.html Third Party Advisory
http://www.securityfocus.com/bid/71107
http://rhn.redhat.com/errata/RHSA-2015-1462.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/98697
https://github.com/jquery/jquery/issues/2432
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-6662
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6662
History
Created Old Value New Value Data Type Notes
2022-05-10 18:41:20 Added to TrackCVE
2022-12-02 02:26:17 2014-11-24T16:59Z 2014-11-24T16:59:01 CVE Published Date updated
2022-12-02 02:26:17 2018-07-14T01:29:00 CVE Modified Date updated
2022-12-02 02:26:17 Modified Vulnerability Status updated