Vulnerability Details CVE-2012-2631
Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.7%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2012-2631
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.1.0.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.1.1.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.1.2.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.2.0.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.3.0.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.3.1.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.3.1.1
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.5.0.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart:1.5.1.0
-
cpe:2.3:a:atmarkweb:@web_shoppingcart_t:*