CVE-2012-2536

CVE Database · CVE-2012-2536

CVE-2012-2536

· N/AModified

CVSS v3.1

N/A

EPSS

16.16%

Published

Sep 11, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."

Weaknesses (CWE)

CWE-79

Affected Products (2)

microsoft · system_center_configuration_managervulnerable

microsoft · systems_management_servervulnerable

References (8)

http://www.securityfocus.com/bid/55430

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781

http://www.securityfocus.com/bid/55430

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781

KEV Catalog EPSS Scores Vendors All CVEs