CVE-2012-2599
Reason: This issue was MERGED into CVE-2012-3835 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions.
Does this matter?
2 public exploits are published in Exploit-DB (verified), so the technical barrier is gone even though the severity is not yet scored. Treat it as high on anything reachable from the internet.
Description
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3835. Reason: This issue was MERGED into CVE-2012-3835 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2012-3835 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- CVSS
- Not yet scored
- EPSS
- No score yet
- Public exploits
- 2 in Exploit-DB · verified · first 29 April 2012
- CISA KEV
- Not listed
- Source
- cret@cert.org
Public exploits (2)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
| EDB-ID | Title | Type | Published | Verified |
|---|---|---|---|---|
| EDB-20062source ↗ | Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injectionphp · muts | webapps | 23 July 2012 | yes |
| EDB-18800source ↗ | Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilitiesphp · Stefan Schurtz | webapps | 29 April 2012 | yes |
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.