First published: Thu Dec 06 2012(Updated: )
Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
KENT-WEB ACCESS REPORT | <=4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-5175 is classified as a medium severity vulnerability due to its potential exploitation through cross-site scripting.
CVE-2012-5175 affects KENT-WEB ACCESS REPORT versions 4.2 and earlier.
To fix CVE-2012-5175, upgrade to the latest version of KENT-WEB ACCESS REPORT that addresses this vulnerability.
CVE-2012-5175 is a cross-site scripting (XSS) vulnerability.
Yes, CVE-2012-5175 can be exploited by remote attackers to inject arbitrary web scripts or HTML.