CVE-2012-3499

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject…

published February 26, 2013

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22913 · 97.7th percentile
Published
2013-02-26T16:00Z
EPSS history
Timeline
  • 26 FEB 16:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject…
    cvelistv5