CVE-2012-2927

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

• CWE-399

• http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17Patch, Vendor Advisory
• http://osvdb.org/81993
• http://secunia.com/advisories/49166Vendor Advisory
• http://www.securityfocus.com/bid/53595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75697
• http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17Patch, Vendor Advisory
• http://osvdb.org/81993
• http://secunia.com/advisories/49166Vendor Advisory
• http://www.securityfocus.com/bid/53595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75697

Published

May 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2921Universal Feed Parser (aka feedparser or python-feedparser) …
• CVE-2012-2922The request_path function in includes/bootstrap.inc in Drupa…
• CVE-2012-2923SQL injection vulnerability in news.php4 in Hypermethod eLea…
• CVE-2012-2924PHP remote file inclusion vulnerability in admin/setup.inc.p…
• CVE-2012-2925SQL injection vulnerability in engine.php in Simple PHP Agen…
• CVE-2012-2926Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 b…9.1
• CVE-2012-2928The Gliffy plugin before 3.7.1 for Atlassian JIRA, and befor…
• CVE-2012-2930Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-2931PHP code injection in TinyWebGallery before 1.8.8 allows rem…7.2
• CVE-2012-2932Multiple cross-site scripting (XSS) vulnerabilities in TinyW…
• CVE-2012-2934Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" …
• CVE-2012-2935Cross-site scripting (XSS) vulnerability in osCommerce/OM/Co…