CVE-2012-5956

Name: CVE-2012-5956
Creator: NVD / NIST
Published: 2012-12-11T12:18:37.343+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.09%

Last modified Jun 16, 2026

CVE-2012-5956 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/Computer_Information/output element.. EPSS estimates a 4.09% chance of exploitation in the next 30 days.

Description

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/Computer_Information/output element.

Metrics

EPSS Probability

4.09%

89.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions	Update
Zohocorp	Manageengine Assetexplorer	<= 5.6	5613

References

http://www.kb.cert.org/vuls/id/571068Third Party Advisory, US Government Resource
http://www.manageengine.com/products/asset-explorer/sp-readme.htmlVendor Advisory
http://www.kb.cert.org/vuls/id/571068Third Party Advisory, US Government Resource
http://www.manageengine.com/products/asset-explorer/sp-readme.htmlVendor Advisory

Timeline

Published: Dec 11, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-5956?

How severe is CVE-2012-5956?

Severity scoring for CVE-2012-5956 is pending analysis. The EPSS model estimates a 4.09% probability of exploitation in the next 30 days.

How do I fix CVE-2012-5956?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-5956?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST