CVE-2012-2599

highrejectedpriority · track · 10exploit · functional

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · functional

Likely / severe?

— EPSS

CVSS 7.3 · high

Is it mine?

0 products

Check your exposure

Who says so?

1 sources

enisa_euvd

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3835. Reason: This issue was MERGED into CVE-2012-3835 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2012-3835 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

cvss

Technical severity, 0–10. One row per scoring source.

7.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · grimoire (LLM-derived)LLM-inferred

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

exploits (2)

Public proof-of-concept and weaponised exploit code.

EDB-18800Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilitiesfunctional · exploit_db
EDB-20062Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injectionfunctional · exploit_db

affected products

Products and version ranges known to be affected.

No affected products recorded.

also known as (1)

Other names and identifiers for this entity.

EUVD-2012-2585 enisa_euvd

sources

Which sources assert this record, and when.

enisa_euvd NVD CVE.org

published 2020-02-20modified 2023-11-07

references

External citations — patches, advisories, analysis.

No references recorded.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan