CVE-2012-1892

Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."

Score

CVSS 2.0 4.3 Medium

Status

Modified - secure@microsoft.com

Published

2012-09-11

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Visual Studio Team Foundation Server (Microsoft)

References

• http://secunia.com/advisories/50463
• http://www.securityfocus.com/bid/55409
• http://www.securitytracker.com/id?1027511
• http://www.us-cert.gov/cas/techalerts/TA12-255A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779