CVE-2012-6074

Published: Feb 24, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors.

Affected (68)

Products: Cloudbees: Jenkins · Jenkins: Jenkins

Cloudbees

1 product

Jenkins

1 product

Jenkins

Configuration A

39 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Up to 1.480.3.1
Jenkins Jenkins	Version 1.400
Jenkins Jenkins	Version 1.401
Jenkins Jenkins	Version 1.402
Jenkins Jenkins	Version 1.403
Jenkins Jenkins	Version 1.404
Jenkins Jenkins	Version 1.405
Jenkins Jenkins	Version 1.406
Jenkins Jenkins	Version 1.407
Jenkins Jenkins	Version 1.408
Jenkins Jenkins	Version 1.409
Jenkins Jenkins	Version 1.410
Jenkins Jenkins	Version 1.411
Jenkins Jenkins	Version 1.412
Jenkins Jenkins	Version 1.413
Jenkins Jenkins	Version 1.414
Jenkins Jenkins	Version 1.415
Jenkins Jenkins	Version 1.416
Jenkins Jenkins	Version 1.417
Jenkins Jenkins	Version 1.418
Jenkins Jenkins	Version 1.419
Jenkins Jenkins	Version 1.420
Jenkins Jenkins	Version 1.421
Jenkins Jenkins	Version 1.422
Jenkins Jenkins	Version 1.423
Jenkins Jenkins	Version 1.424
Jenkins Jenkins	Version 1.425
Jenkins Jenkins	Version 1.426
Jenkins Jenkins	Version 1.427
Jenkins Jenkins	Version 1.428
Jenkins Jenkins	Version 1.429
Jenkins Jenkins	Version 1.430
Jenkins Jenkins	Version 1.431
Jenkins Jenkins	Version 1.432
Jenkins Jenkins	Version 1.433
Jenkins Jenkins	Version 1.434
Jenkins Jenkins	Version 1.435
Jenkins Jenkins	Version 1.436
Jenkins Jenkins	Version 1.437

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.447.1.1
Cloudbees Jenkins	Version 1.447.2.2
Cloudbees Jenkins	Version 1.447.3.1

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.424.0.2
Cloudbees Jenkins	Version 1.424.0.4
Cloudbees Jenkins	Version 1.424.1.1
Cloudbees Jenkins	Version 1.424.2.1
Cloudbees Jenkins	Version 1.424.4.1
Cloudbees Jenkins	Version 1.424.5.1
Cloudbees Jenkins	Version 1.424.6.11
Cloudbees Jenkins	Version 1.424.6.1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.466.1.2
Cloudbees Jenkins	Version 1.466.2.1

Configuration E

16 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.400
Cloudbees Jenkins	Version 1.424
Cloudbees Jenkins	Version 1.447
Jenkins Jenkins	Up to 1.466.2
Jenkins Jenkins	Version 1.409.1
Jenkins Jenkins	Version 1.409.2
Jenkins Jenkins	Version 1.409.3
Jenkins Jenkins	Version 1.424.1
Jenkins Jenkins	Version 1.424.2
Jenkins Jenkins	Version 1.424.3
Jenkins Jenkins	Version 1.424.4
Jenkins Jenkins	Version 1.424.5
Jenkins Jenkins	Version 1.424.6
Jenkins Jenkins	Version 1.447.1
Jenkins Jenkins	Version 1.447.2
Jenkins Jenkins	Version 1.466.1