CVE-2012-1892

Published: Sep 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."

Affected (1)

Products: Microsoft: Visual Studio Team Foundation Server

Microsoft

1 product

Visual Studio Team Foundation Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual Studio Team Foundation Server	Version 2010 sp1

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (12)

http://secunia.com/advisories/50463

Source: secure@microsoft.com

http://www.securityfocus.com/bid/55409

Source: secure@microsoft.com

http://www.securitytracker.com/id?1027511

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779

Source: secure@microsoft.com

http://secunia.com/advisories/50463