CVE-2012-0325 Jenkins allows Cross-Site Scripting (XSS)

MediumCVSS 4.3 EPSS 1.0%

Published: 2012-03-09 13:00
Updated: 2026-06-17 02:37
Exploit status: No public exploit known

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

Affected products

Product	Affected versions	Fixed in
org.jenkins-ci.main/jenkins-core(Maven)	>= 1.425, < 1.454	1.454
org.jenkins-ci.main/jenkins-core(Maven)	= 1.425	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.426	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.427	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.428	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.429	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.430	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.431	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.432	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.433	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.434	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.435	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.436	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.437	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.438	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.439	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.440	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.441	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.442	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.443	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.444	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.445	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.446	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.447	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.447.1	No fix listed

Show 175 more

Product	Affected versions	Fixed in
org.jenkins-ci.main/jenkins-core(Maven)	= 1.447.2	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.448	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.449	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.450	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.451	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.452	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.453	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	< 1.424.5	1.424.5
org.jenkins-ci.main/jenkins-core(Maven)	= 1.396	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.397	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.398	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.399	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.400	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.401	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.403	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.404	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.405	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.406	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.407	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.408	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.409	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.409.1	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.409.2	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.409.3	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.410	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.411	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.412	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.413	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.414	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.415	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.416	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.417	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.418	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.419	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.420	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.421	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.422	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.423	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.424	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.424.1	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.424.2	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.424.3	No fix listed
org.jenkins-ci.main/jenkins-core(Maven)	= 1.424.4	No fix listed
cloudbees jenkins	<= 1.453	No fix listed
cloudbees jenkins	= 1.400	No fix listed
cloudbees jenkins	= 1.400.0.12	No fix listed
cloudbees jenkins	= 1.424	No fix listed
cloudbees jenkins	= 1.424.5	No fix listed
jenkins	= 1.301	No fix listed
jenkins	= 1.302	No fix listed
jenkins	= 1.303	No fix listed
jenkins	= 1.304	No fix listed
jenkins	= 1.305	No fix listed
jenkins	= 1.306	No fix listed
jenkins	= 1.307	No fix listed
jenkins	= 1.308	No fix listed
jenkins	= 1.309	No fix listed
jenkins	= 1.310	No fix listed
jenkins	= 1.311	No fix listed
jenkins	= 1.312	No fix listed
jenkins	= 1.313	No fix listed
jenkins	= 1.314	No fix listed
jenkins	= 1.315	No fix listed
jenkins	= 1.316	No fix listed
jenkins	= 1.317	No fix listed
jenkins	= 1.318	No fix listed
jenkins	= 1.319	No fix listed
jenkins	= 1.320	No fix listed
jenkins	= 1.321	No fix listed
jenkins	= 1.322	No fix listed
jenkins	= 1.323	No fix listed
jenkins	= 1.324	No fix listed
jenkins	= 1.325	No fix listed
jenkins	= 1.326	No fix listed
jenkins	= 1.327	No fix listed
jenkins	= 1.328	No fix listed
jenkins	= 1.329	No fix listed
jenkins	= 1.330	No fix listed
jenkins	= 1.331	No fix listed
jenkins	= 1.332	No fix listed
jenkins	= 1.333	No fix listed
jenkins	= 1.334	No fix listed
jenkins	= 1.335	No fix listed
jenkins	= 1.336	No fix listed
jenkins	= 1.337	No fix listed
jenkins	= 1.338	No fix listed
jenkins	= 1.339	No fix listed
jenkins	= 1.340	No fix listed
jenkins	= 1.341	No fix listed
jenkins	= 1.342	No fix listed
jenkins	= 1.343	No fix listed
jenkins	= 1.344	No fix listed
jenkins	= 1.345	No fix listed
jenkins	= 1.346	No fix listed
jenkins	= 1.347	No fix listed
jenkins	= 1.348	No fix listed
jenkins	= 1.349	No fix listed
jenkins	= 1.350	No fix listed
jenkins	= 1.351	No fix listed
jenkins	= 1.352	No fix listed
jenkins	= 1.353	No fix listed
jenkins	= 1.354	No fix listed
jenkins	= 1.355	No fix listed
jenkins	= 1.356	No fix listed
jenkins	= 1.357	No fix listed
jenkins	= 1.358	No fix listed
jenkins	= 1.359	No fix listed
jenkins	= 1.360	No fix listed
jenkins	= 1.361	No fix listed
jenkins	= 1.362	No fix listed
jenkins	= 1.363	No fix listed
jenkins	= 1.364	No fix listed
jenkins	= 1.365	No fix listed
jenkins	= 1.366	No fix listed
jenkins	= 1.367	No fix listed
jenkins	= 1.368	No fix listed
jenkins	= 1.369	No fix listed
jenkins	= 1.370	No fix listed
jenkins	= 1.371	No fix listed
jenkins	= 1.372	No fix listed
jenkins	= 1.373	No fix listed
jenkins	= 1.374	No fix listed
jenkins	= 1.375	No fix listed
jenkins	= 1.376	No fix listed
jenkins	= 1.377	No fix listed
jenkins	= 1.378	No fix listed
jenkins	= 1.379	No fix listed
jenkins	= 1.380	No fix listed
jenkins	= 1.382	No fix listed
jenkins	= 1.383	No fix listed
jenkins	= 1.384	No fix listed
jenkins	= 1.386	No fix listed
jenkins	= 1.387	No fix listed
jenkins	= 1.388	No fix listed
jenkins	= 1.389	No fix listed
jenkins	= 1.390	No fix listed
jenkins	= 1.391	No fix listed
jenkins	= 1.392	No fix listed
jenkins	= 1.393	No fix listed
jenkins	= 1.394	No fix listed
jenkins	= 1.395	No fix listed
jenkins	= 1.396	No fix listed
jenkins	= 1.397	No fix listed
jenkins	= 1.398	No fix listed
jenkins	= 1.399	No fix listed
jenkins	= 1.400	No fix listed
jenkins	= 1.401	No fix listed
jenkins	= 1.402	No fix listed
jenkins	= 1.403	No fix listed
jenkins	= 1.404	No fix listed
jenkins	= 1.405	No fix listed
jenkins	= 1.406	No fix listed
jenkins	= 1.407	No fix listed
jenkins	= 1.408	No fix listed
jenkins	= 1.409	No fix listed
jenkins	= 1.409.1	No fix listed
jenkins	= 1.409.2	No fix listed
jenkins	= 1.410	No fix listed
jenkins	= 1.411	No fix listed
jenkins	= 1.412	No fix listed
jenkins	= 1.413	No fix listed
jenkins	= 1.414	No fix listed
jenkins	= 1.415	No fix listed
jenkins	= 1.416	No fix listed
jenkins	= 1.417	No fix listed
jenkins	= 1.418	No fix listed
jenkins	= 1.419	No fix listed
jenkins	= 1.420	No fix listed
jenkins	= 1.421	No fix listed
jenkins	= 1.422	No fix listed
jenkins	= 1.423	No fix listed
jenkins	= 1.424	No fix listed
jenkins	= 1.425	No fix listed
jenkins	= 1.426	No fix listed
jenkins	= 1.427	No fix listed

References

nvd.nist.gov third-party-advisory vendor-advisory
github.com product
web.archive.org
JVN#79950061 third-party-advisory
JVNDB-2012-000023 third-party-advisory
www.cloudbees.com vendor-advisory
52384 vdb-entry
github.com

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

All scores (3)

v4.0 2.1 · github
v4.0 – · osv:ghsa
v2.0 4.3 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.03% (percentile 64.2)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.