Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2012-4554

The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.55
EPSS Ranking 97.9%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2012-4554
  • Drupal » Drupal » Version: 7.0
    cpe:2.3:a:drupal:drupal:7.0
  • Drupal » Drupal » Version: 7.1
    cpe:2.3:a:drupal:drupal:7.1
  • Drupal » Drupal » Version: 7.10
    cpe:2.3:a:drupal:drupal:7.10
  • Drupal » Drupal » Version: 7.11
    cpe:2.3:a:drupal:drupal:7.11
  • Drupal » Drupal » Version: 7.12
    cpe:2.3:a:drupal:drupal:7.12
  • Drupal » Drupal » Version: 7.13
    cpe:2.3:a:drupal:drupal:7.13
  • Drupal » Drupal » Version: 7.14
    cpe:2.3:a:drupal:drupal:7.14
  • Drupal » Drupal » Version: 7.15
    cpe:2.3:a:drupal:drupal:7.15
  • Drupal » Drupal » Version: 7.2
    cpe:2.3:a:drupal:drupal:7.2
  • Drupal » Drupal » Version: 7.3
    cpe:2.3:a:drupal:drupal:7.3
  • Drupal » Drupal » Version: 7.4
    cpe:2.3:a:drupal:drupal:7.4
  • Drupal » Drupal » Version: 7.5
    cpe:2.3:a:drupal:drupal:7.5
  • Drupal » Drupal » Version: 7.6
    cpe:2.3:a:drupal:drupal:7.6
  • Drupal » Drupal » Version: 7.7
    cpe:2.3:a:drupal:drupal:7.7
  • Drupal » Drupal » Version: 7.8
    cpe:2.3:a:drupal:drupal:7.8
  • Drupal » Drupal » Version: 7.9
    cpe:2.3:a:drupal:drupal:7.9


Contact Us

Shodan ® - All rights reserved