Cross-Site Scripting Vulnerability in Netsweeper WebAdmin Portal
CVE-2012-2446

Currently unrated

Key Information:

Vendor: Netsweeper
Status: Netsweeper
Vendor: CVE Published:; 9 July 2012

What is CVE-2012-2446?

A cross-site scripting vulnerability exists in the WebAdmin Portal of Netsweeper. This allows remote attackers to inject arbitrary web scripts or HTML through the 'group' parameter during a lookup action, potentially compromising the security and integrity of user data and allowing unauthorized actions to be executed in the context of unsuspecting users.

References

http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2...

x_refsource_MISC

http://www.kb.cert.org/vuls/id/763795

third-party-advisoryx_refsource_CERT-VN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jul 9, 2012

CVE-2012-2446 Data

JSON