CVE-2012-3835: XSS
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/baseqrymain.php, which is not properly handled in an error page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3835?
CVE-2012-3835 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-3835?
To fix CVE-2012-3835, update your AlienVault OSSIM installation to a version that has patched the XSS vulnerabilities.
What are the exploit vectors for CVE-2012-3835?
CVE-2012-3835 can be exploited via the url parameter in top.php and the time[0][0] parameter in forensics/base_qry_main.php.
Can CVE-2012-3835 be exploited remotely?
Yes, CVE-2012-3835 can be exploited remotely by attackers who can manipulate the affected parameters.
What are the impacts of CVE-2012-3835?
The impacts of CVE-2012-3835 include the potential for attackers to inject and execute arbitrary web scripts or HTML in users' browsers.