VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 20, 2012· Updated Jun 16, 2026

CVE-2012-2161

CVE-2012-2161

Description

Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected products

9
  • IBM/Security Appscan Source6 versions
    cpe:2.3:a:ibm:security_appscan_source:7.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:security_appscan_source:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_appscan_source:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_appscan_source:8.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_appscan_source:8.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_appscan_source:8.5.0.1:*:*:*:*:*:*:*
  • IBM/Spss Data Collection2 versions
    cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*
  • IBM/Eclipse Help Systemllm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.