Strix
26.1K

CVE-2012-0869

UnknownEPSS 4.85%

Last modified

CVE-2012-0869 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.. EPSS estimates a 4.85% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Metrics

EPSS Probability
4.85%

90.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Ulli HorlacherFex<= 20120207
Ulli HorlacherFex2011205
Ulli HorlacherFex20100208
Ulli HorlacherFex20110609
Ulli HorlacherFex20110610
Ulli HorlacherFex20110614
Ulli HorlacherFex20110615
Ulli HorlacherFex20110616
Ulli HorlacherFex20110621
Ulli HorlacherFex20110622
Ulli HorlacherFex20110627
Ulli HorlacherFex20110630
Ulli HorlacherFex20110701
Ulli HorlacherFex20110714
Ulli HorlacherFex20110716
Ulli HorlacherFex20110722
Ulli HorlacherFex20110726
Ulli HorlacherFex20110727
Ulli HorlacherFex20110730
Ulli HorlacherFex20110731
Ulli HorlacherFex20110803
Ulli HorlacherFex20110807
Ulli HorlacherFex20110808
Ulli HorlacherFex20110809
Ulli HorlacherFex20110810
Ulli HorlacherFex20110811
Ulli HorlacherFex20110813
Ulli HorlacherFex20110826
Ulli HorlacherFex20110829
Ulli HorlacherFex20110830
Ulli HorlacherFex20110901
Ulli HorlacherFex20110905
Ulli HorlacherFex20110906
Ulli HorlacherFex20110907
Ulli HorlacherFex20110919
Ulli HorlacherFex20110920
Ulli HorlacherFex20110921
Ulli HorlacherFex20110930
Ulli HorlacherFex20111003
Ulli HorlacherFex20111005
Ulli HorlacherFex20111013
Ulli HorlacherFex20111028
Ulli HorlacherFex20111102
Ulli HorlacherFex20111108
Ulli HorlacherFex20111115
Ulli HorlacherFex20111129
Ulli HorlacherFex20111230
Ulli HorlacherFex20111231
Ulli HorlacherFex20120102
Ulli HorlacherFex20120106

Showing 50 of 56 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-0869?
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
How severe is CVE-2012-0869?
Severity scoring for CVE-2012-0869 is pending analysis. The EPSS model estimates a 4.85% probability of exploitation in the next 30 days.
How do I fix CVE-2012-0869?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-0869?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST