CVE-2012-4340: XSS
Published Aug 15, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
12 affected components
Sybase EAServer<=6.0.2
Sybase EAServer=4.0
Sybase EAServer=4.2.5
Sybase EAServer=5.0
Sybase EAServer=5.0.1
Sybase EAServer=5.1
Sybase EAServer=5.2
Sybase EAServer=5.2.1
Sybase EAServer=5.3
Sybase EAServer=5.5
Sybase EAServer=6.0
Sybase EAServer=6.0.1
Event History
Aug 15, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4340?
The severity of CVE-2012-4340 is considered to be high due to the risk of remote code execution through cross-site scripting.
2
How do I fix CVE-2012-4340?
To fix CVE-2012-4340, upgrade Sybase EAServer to version 6.1 or later where the vulnerability has been addressed.
3
What versions of Sybase EAServer are affected by CVE-2012-4340?
CVE-2012-4340 affects Sybase EAServer versions prior to 6.1, including versions 4.0 through 6.0.2.
4
What type of vulnerability is CVE-2012-4340?
CVE-2012-4340 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-4340 be exploited remotely?
Yes, CVE-2012-4340 can be exploited remotely, allowing attackers to inject arbitrary web script or HTML.