CVE-2012-2536

Published: Sep 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."

Affected (2)

Products: Microsoft: System Center Configuration Manager, Systems Management Server

2 products

System Center Configuration Manager

Systems Management Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft System Center Configuration Manager	Version 2007 sp2
Microsoft Systems Management Server	Version 2003 sp2

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (8)

http://www.securityfocus.com/bid/55430

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781

Source: secure@microsoft.com

http://www.securityfocus.com/bid/55430

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.