Unrated severityNVD Advisory· Published Nov 18, 2012· Updated Apr 29, 2026

CVE-2012-4950

Description

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages.

Affected products

Patterninsight/Pattern Insight
cpe:2.3:a:patterninsight:pattern_insight:2.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.kb.cert.org/vuls/id/802596nvdUS Government Resource
osvdb.org/87053nvd
secunia.com/advisories/51203nvd
www.securityfocus.com/bid/56381nvd
exchange.xforce.ibmcloud.com/vulnerabilities/79787nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000