CVE-2012-1260

Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other…

published January 9, 2020

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not be a vulnerability, since an administrator might already have the privileges to create arbitrary script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02256 · 82.7th percentile
Published
2020-01-09T19:47Z
EPSS history
Timeline
  • 09 JAN 19:47Z
    Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other…
    cvelistv5