CVE-2012-4600

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags.

• CWE-79

• http://secunia.com/advisories/50615
• http://www.kb.cert.org/vuls/id/511404Exploit, US Government Resource
• http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2012-02/Vendor Advisory
• http://znuny.com/en/#%21/advisory/ZSA-2012-02
• http://secunia.com/advisories/50615
• http://www.kb.cert.org/vuls/id/511404Exploit, US Government Resource
• http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2012-02/Vendor Advisory
• http://znuny.com/en/#%21/advisory/ZSA-2012-02

Published

Aug 31, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4594McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows r…
• CVE-2012-4595McAfee Email and Web Security (EWS) 5.5 through Patch 6 and …
• CVE-2012-4596Directory traversal vulnerability in McAfee Email Gateway (M…
• CVE-2012-4597Cross-site scripting (XSS) vulnerability in McAfee Email and…
• CVE-2012-4598An unspecified ActiveX control in McAfee Virtual Technician …
• CVE-2012-4599McAfee SmartFilter Administration, and SmartFilter Administr…
• CVE-2012-4601Multiple SQL injection vulnerabilities in Nicola Asuni TCExa…
• CVE-2012-4602Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2012-4603Citrix XenApp Online Plug-in for Windows 12.1 and earlier, a…7.8
• CVE-2012-4604The TRITON management console in Websense Web Security befor…
• CVE-2012-4605The default configuration of the SMTP component in Websense …
• CVE-2012-4606Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 …7.8