CVE-2012-2984: XSS
Published Aug 24, 2012
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in monitor/moverview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
Affected Software
1 affected component
Websense Websense Content Content Gateway<=7.7
Event History
Aug 24, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2984?
CVE-2012-2984 is classified as a medium severity vulnerability due to its potential for remote code execution via cross-site scripting.
2
How do I fix CVE-2012-2984?
To fix CVE-2012-2984, upgrade Websense Content Gateway to version 7.7.3 or later.
3
What software is affected by CVE-2012-2984?
CVE-2012-2984 affects versions of Websense Content Gateway before 7.7.3.
4
What types of attacks can CVE-2012-2984 enable?
CVE-2012-2984 can enable attackers to inject arbitrary web scripts or HTML through vulnerability in specific parameters.
5
Is CVE-2012-2984 exploitable remotely?
Yes, CVE-2012-2984 is exploitable remotely, allowing attackers to target affected installations over the internet.