CVE-2012-1892 Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XS...

MediumCVSS 4.3 EPSS 16.5%

Published: 2012-09-11 21:00
Updated: 2026-06-17 02:40
Exploit status: No public exploit known

Description

Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."

Affected products

Product	Affected versions	Fixed in
Microsoft visual studio team foundation server	= 2010-sp1	No fix listed

References

50463 third-party-advisory
55409 vdb-entry
1027511 vdb-entry
TA12-255A third-party-advisory us-government-resource
MS12-061 vendor-advisory
oval:org.mitre.oval:def:15779 signature vdb-entry

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 16.52% (percentile 97.0)
CWE: CWE-79

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.