CVE-2012-4970 Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote atta...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom hdx system software | <= 2.7.1_j | No fix listed |
| polycom hdx system software | = 2.0.5_j | No fix listed |
| polycom hdx system software | = 2.5.0.7 | No fix listed |
| polycom hdx system software | = 2.5.0.7_g | No fix listed |
| polycom hdx system software | = 2.6.1 | No fix listed |
| polycom hdx system software | = 2.6.1.3 | No fix listed |
| polycom hdx system software | = 2.7.0_j | No fix listed |
| polycom hdx system software | <= 3.0.4 | No fix listed |
| polycom hdx system software | = 3.0.0 | No fix listed |
| polycom hdx system software | = 3.0.0.1 | No fix listed |
| polycom hdx system software | = 3.0.0.2 | No fix listed |
| polycom hdx system software | = 3.0.1 | No fix listed |
| polycom hdx system software | = 3.0.2 | No fix listed |
| polycom hdx system software | = 3.0.3 | No fix listed |
| polycom hdx system software | = 3.0.3.1 | No fix listed |