VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 19, 2012· Updated Jun 16, 2026

CVE-2012-5004

CVE-2012-5004

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create_extra_pack.html.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Parallels/H Sphere2 versions
    cpe:2.3:a:parallels:h-sphere:3.3:p1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:parallels:h-sphere:3.3:p1:*:*:*:*:*:*
    • (no CPE)range: = 3.3 Patch 1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.