← Back

CVE-2012-2927

nvd nist
Published: May 22, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

Affected (57)

3 products
Tempo
Tempo6.3.0
Tempo6.3.2
Configuration A
57 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tm Software
version ≤ 6.4.3
Version 2.2
Version 2.3.1
Version 2.3
Version 2.4.1
Version 2.5.1
Version 2.6.1
Version 2.7.1
Version 2.8.1
Version 4.0.1
Version 4.0
Version 4.1
Version 4.2
Version 4.3
Version 4.4.2
Version 4.4
Version 4.5.2
Version 4.5
Version 5.0
Version 5.1.1
Version 5.1
Version 5.2.1
Version 5.2.2
Version 5.2.3
Version 5.2
Version 5.3.1
Version 5.3.2
Version 5.3.3.1
Version 5.3.3
Version 5.3
Version 5.4.1
Version 5.4.2
Version 5.4
Version 6.0.0
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.1.0
Version 6.1.1 jira42
Version 6.2.0
Version 6.2.1-jira42
Version 6.2.2 jira42
Version 6.2.3 jira42
Version 6.2.4 jira42
Version 6.2.5 jira42
Version 6.2.6 jira42
Version 6.2.7 jira42
Version 6.3.1 jira42
Version 6.4.2
Version 6.4 jira42
Version 6.5
Version 7.0.0 rc1
Version 7.0.0 rc2
Version 7.0.2
Version 7.0
Version jira42
Version jira42
Running on/withPlatform Versions
Atlassian
Jira
All versions

Related CWEs

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.