CVE-2012-4955

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-15 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Dell OpenManage Server Administrator: through 6.5.0; 1.00.0000, 4.3.0, 4.4.0, 4.5.0, 5.0.0, 5.1.0 (+11)

References

http://osvdb.org/87405
http://secunia.com/advisories/51297
http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=5JDN0&osCode=WNET&fileId=3082293694
http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=JJMWP&osCode=WNET&fileId=3082295338
http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=PCXMR&osCode=WNET&fileId=3082295344
http://www.kb.cert.org/vuls/id/558132
http://www.securityfocus.com/bid/56518
https://exchange.xforce.ibmcloud.com/vulnerabilities/80071
http://osvdb.org/87405
http://secunia.com/advisories/51297
http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=5JDN0&osCode=WNET&fileId=3082293694
http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=JJMWP&osCode=WNET&fileId=3082295338

Get alerted when CVE-2012-4955 or the next vulnerability affects your stack