# Vulnerabilities published in 2012


- [CVE-2012-0439](https://insights.sbomify.com/CVE-2012-0439/): Code injection in novell:groupwise (critical 9.3)
- [CVE-2012-0435](https://insights.sbomify.com/CVE-2012-0435/): Missing authorization in suse:webyast (medium 5.8)
- [CVE-2012-0434](https://insights.sbomify.com/CVE-2012-0434/): Misconfiguration in novell:suse cloud (critical 10.0)
- [CVE-2012-0433](https://insights.sbomify.com/CVE-2012-0433/): insecure permissions on files containing confidential data (low 3.3)
- [CVE-2012-0432](https://insights.sbomify.com/CVE-2012-0432/): Memory corruption in microfocus:edirectory (critical 10.0)
- [CVE-2012-0430](https://insights.sbomify.com/CVE-2012-0430/): Auth bypass in microfocus:edirectory (medium 6.4)
- [CVE-2012-0429](https://insights.sbomify.com/CVE-2012-0429/): Denial of service in microfocus:edirectory (medium 4.0)
- [CVE-2012-0428](https://insights.sbomify.com/CVE-2012-0428/): Cross-site scripting in microfocus:edirectory (medium 4.3)
- [CVE-2012-0427](https://insights.sbomify.com/CVE-2012-0427/): Privilege escalation in opensuse:opensuse (high 7.2)
- [CVE-2012-0426](https://insights.sbomify.com/CVE-2012-0426/): Race condition in novell:suse linux enterprise for sap applications (high 7.2)
- [CVE-2012-0425](https://insights.sbomify.com/CVE-2012-0425/): Information disclosure in opensuse:opensuse (high 7.8)
- [CVE-2012-0421](https://insights.sbomify.com/CVE-2012-0421/): Information disclosure in novell:suse audit log keeper (low 2.1)
- [CVE-2012-0420](https://insights.sbomify.com/CVE-2012-0420/): Path traversal in opensuse:zypper (medium 4.4)
- [CVE-2012-0419](https://insights.sbomify.com/CVE-2012-0419/): Path traversal in novell:groupwise (medium 5.0)
- [CVE-2012-0418](https://insights.sbomify.com/CVE-2012-0418/): Other in novell:groupwise (critical 9.3)
- [CVE-2012-0417](https://insights.sbomify.com/CVE-2012-0417/): Integer overflow in novell:groupwise (critical 10.0)
- [CVE-2012-0414](https://insights.sbomify.com/CVE-2012-0414/): Cross-site scripting in novell:suse manager (medium 4.3)
- [CVE-2012-0411](https://insights.sbomify.com/CVE-2012-0411/): Other in novell:iprint (critical 10.0)
- [CVE-2012-0410](https://insights.sbomify.com/CVE-2012-0410/): Path traversal in novell:groupwise (medium 5.0)
- [CVE-2012-0409](https://insights.sbomify.com/CVE-2012-0409/): Memory corruption in emc:autostart (high 7.5)
- [CVE-2012-0407](https://insights.sbomify.com/CVE-2012-0407/): Integer overflow in emc:data protection advisor (medium 5.0)
- [CVE-2012-0406](https://insights.sbomify.com/CVE-2012-0406/): Null dereference in emc:data protection advisor (high 7.8)
- [CVE-2012-0404](https://insights.sbomify.com/CVE-2012-0404/): Cross-site scripting in emc:documentum eroom (medium 4.3)
- [CVE-2012-0403](https://insights.sbomify.com/CVE-2012-0403/): Path traversal in rsa:envision (medium 6.3)
- [CVE-2012-0402](https://insights.sbomify.com/CVE-2012-0402/): Hardcoded credentials in rsa:envision (critical 9.3)
- [CVE-2012-0401](https://insights.sbomify.com/CVE-2012-0401/): SQL injection in rsa:envision (medium 6.5)
- [CVE-2012-0400](https://insights.sbomify.com/CVE-2012-0400/): Auth bypass in rsa:envision (high 7.9)
- [CVE-2012-0399](https://insights.sbomify.com/CVE-2012-0399/): Cross-site scripting in rsa:envision (medium 4.3)
- [CVE-2012-0398](https://insights.sbomify.com/CVE-2012-0398/): Auth bypass in emc:documentum eroom (high 7.5)
- [CVE-2012-0397](https://insights.sbomify.com/CVE-2012-0397/): Memory corruption in rsa:securid software token converter (high 7.6)
- [CVE-2012-0396](https://insights.sbomify.com/CVE-2012-0396/): Missing authorization in emc:documentum xplore (medium 4.0)
- [CVE-2012-0395](https://insights.sbomify.com/CVE-2012-0395/): Memory corruption in emc:networker (critical 9.3)
- [CVE-2012-0394](https://insights.sbomify.com/CVE-2012-0394/): Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode (medium 6.8)
- [CVE-2012-0393](https://insights.sbomify.com/CVE-2012-0393/): Apache Struts's ParameterInterceptor component does not prevent access to public constructors (medium 6.4)
- [CVE-2012-0392](https://insights.sbomify.com/CVE-2012-0392/): Apache Struts's CookieInterceptor component does not use the parameter-name whitelist (medium 6.8)
- [CVE-2012-0391](https://insights.sbomify.com/CVE-2012-0391/): Apache Struts 2 Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2012-0390](https://insights.sbomify.com/CVE-2012-0390/): Weak cryptography in gnu:gnutls (medium 4.3)
- [CVE-2012-0389](https://insights.sbomify.com/CVE-2012-0389/): Cross-site scripting in mailenable:mailenable (medium 4.3)
- [CVE-2012-0388](https://insights.sbomify.com/CVE-2012-0388/): Denial of service in cisco:ios (high 7.8)
- [CVE-2012-0387](https://insights.sbomify.com/CVE-2012-0387/): Denial of service in cisco:ios (high 7.8)
- [CVE-2012-0386](https://insights.sbomify.com/CVE-2012-0386/): Denial of service in cisco:ios (high 7.8)
- [CVE-2012-0385](https://insights.sbomify.com/CVE-2012-0385/): Denial of service in cisco:ios (high 7.8)
- [CVE-2012-0384](https://insights.sbomify.com/CVE-2012-0384/): Privilege escalation in cisco:ios (high 7.2)
- [CVE-2012-0383](https://insights.sbomify.com/CVE-2012-0383/): Denial of service in cisco:ios (high 7.8)
- [CVE-2012-0382](https://insights.sbomify.com/CVE-2012-0382/): Denial of service in cisco:ios (high 7.5)
- [CVE-2012-0381](https://insights.sbomify.com/CVE-2012-0381/): Denial of service in cisco:ios (high 7.5)
- [CVE-2012-0378](https://insights.sbomify.com/CVE-2012-0378/): Denial of service in cisco:5500 series adaptive security appliance (high 7.8)
- [CVE-2012-0376](https://insights.sbomify.com/CVE-2012-0376/): Denial of service in cisco:unified communications manager (medium 5.0)
- [CVE-2012-0371](https://insights.sbomify.com/CVE-2012-0371/): Missing authorization in cisco:2000 wireless lan controller (critical 9.3)
- [CVE-2012-0370](https://insights.sbomify.com/CVE-2012-0370/): Denial of service in cisco:2000 wireless lan controller (high 7.8)
- [CVE-2012-0369](https://insights.sbomify.com/CVE-2012-0369/): Denial of service in cisco:2000 wireless lan controller (high 7.8)
- [CVE-2012-0368](https://insights.sbomify.com/CVE-2012-0368/): Denial of service in cisco:2000 wireless lan controller (high 7.8)
- [CVE-2012-0367](https://insights.sbomify.com/CVE-2012-0367/): Denial of service in cisco:unity connection (high 7.8)
- [CVE-2012-0366](https://insights.sbomify.com/CVE-2012-0366/): Privilege escalation in cisco:unity connection (critical 9.0)
- [CVE-2012-0365](https://insights.sbomify.com/CVE-2012-0365/): Path traversal in cisco:small business srp520-u series firmware (critical 9.0)
- [CVE-2012-0364](https://insights.sbomify.com/CVE-2012-0364/): Missing authorization in cisco:small business srp520-u series firmware (high 7.8)
- [CVE-2012-0363](https://insights.sbomify.com/CVE-2012-0363/): Command injection in cisco:small business srp520-u series firmware (critical 9.0)
- [CVE-2012-0362](https://insights.sbomify.com/CVE-2012-0362/): Security feature bypass in cisco:ios (medium 4.3)
- [CVE-2012-0361](https://insights.sbomify.com/CVE-2012-0361/): Denial of service in cisco:ip communicator (medium 5.0)
- [CVE-2012-0360](https://insights.sbomify.com/CVE-2012-0360/): Denial of service in cisco:ios (medium 5.0)
- [CVE-2012-0359](https://insights.sbomify.com/CVE-2012-0359/): Denial of service in cisco:cius (high 7.8)
- [CVE-2012-0358](https://insights.sbomify.com/CVE-2012-0358/): Memory corruption in cisco:5500 series adaptive security appliance (critical 9.3)
- [CVE-2012-0356](https://insights.sbomify.com/CVE-2012-0356/): Denial of service in cisco:5500 series adaptive security appliance (high 7.8)
- [CVE-2012-0355](https://insights.sbomify.com/CVE-2012-0355/): Denial of service in cisco:5500 series adaptive security appliance (high 7.8)
- [CVE-2012-0354](https://insights.sbomify.com/CVE-2012-0354/): Denial of service in cisco:5500 series adaptive security appliance (high 7.1)
- [CVE-2012-0353](https://insights.sbomify.com/CVE-2012-0353/): Denial of service in cisco:5500 series adaptive security appliance (high 7.1)
- [CVE-2012-0352](https://insights.sbomify.com/CVE-2012-0352/): Denial of service in cisco:nexus 1000v (high 7.8)
- [CVE-2012-0340](https://insights.sbomify.com/CVE-2012-0340/): Cross-site scripting in cisco:ironport encryption appliance (medium 4.3)
- [CVE-2012-0339](https://insights.sbomify.com/CVE-2012-0339/): Security feature bypass in cisco:ios (medium 5.0)
- [CVE-2012-0338](https://insights.sbomify.com/CVE-2012-0338/): Security feature bypass in cisco:ios (medium 5.0)
- [CVE-2012-0337](https://insights.sbomify.com/CVE-2012-0337/): SQL injection in cisco:unified meetingplace (medium 6.5)
- [CVE-2012-0335](https://insights.sbomify.com/CVE-2012-0335/): Auth bypass in cisco:5500 series adaptive security appliance (medium 5.0)
- [CVE-2012-0334](https://insights.sbomify.com/CVE-2012-0334/): Security feature bypass in IronPort Web Security Appliance AsyncOS (medium 6.4)
- [CVE-2012-0333](https://insights.sbomify.com/CVE-2012-0333/): Auth bypass in cisco:small business ip phone (medium 5.0)
- [CVE-2012-0331](https://insights.sbomify.com/CVE-2012-0331/): Denial of service in cisco:telepresence system software (high 7.5)
- [CVE-2012-0330](https://insights.sbomify.com/CVE-2012-0330/): Denial of service in cisco:telepresence system software (high 7.8)
- [CVE-2012-0329](https://insights.sbomify.com/CVE-2012-0329/): Code injection in cisco:digital media manager (critical 9.0)
- [CVE-2012-0328](https://insights.sbomify.com/CVE-2012-0328/): Information disclosure in janetter:janetter (medium 5.0)
- [CVE-2012-0327](https://insights.sbomify.com/CVE-2012-0327/): Cross-site scripting in redmine:redmine (medium 4.3)
- [CVE-2012-0326](https://insights.sbomify.com/CVE-2012-0326/): Missing authorization in tetsuya aoyama:twicca (medium 5.0)
- [CVE-2012-0325](https://insights.sbomify.com/CVE-2012-0325/): Jenkins allows Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2012-0324](https://insights.sbomify.com/CVE-2012-0324/): Jenkins allows Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2012-0323](https://insights.sbomify.com/CVE-2012-0323/): Cross-site scripting in paul lesniewsk:autocomplete (medium 4.3)
- [CVE-2012-0322](https://insights.sbomify.com/CVE-2012-0322/): Missing authorization in estrongs:es file explorer (medium 4.3)
- [CVE-2012-0321](https://insights.sbomify.com/CVE-2012-0321/): Denial of service in kingsoft:internet security (low 2.1)
- [CVE-2012-0320](https://insights.sbomify.com/CVE-2012-0320/): Auth bypass in sixapart:movable type (high 7.5)
- [CVE-2012-0319](https://insights.sbomify.com/CVE-2012-0319/): Command injection in movabletype:movable type advanced (medium 6.5)
- [CVE-2012-0318](https://insights.sbomify.com/CVE-2012-0318/): Cross-site scripting in movabletype:movable type advanced (medium 4.3)
- [CVE-2012-0317](https://insights.sbomify.com/CVE-2012-0317/): Cross-site request forgery in sixapart:movable type (medium 6.8)
- [CVE-2012-0316](https://insights.sbomify.com/CVE-2012-0316/): Information disclosure in cookpad:android activities (medium 5.0)
- [CVE-2012-0315](https://insights.sbomify.com/CVE-2012-0315/): Privilege escalation in estsoft:alftp (critical 9.3)
- [CVE-2012-0314](https://insights.sbomify.com/CVE-2012-0314/): Cross-site request forgery in emobile:pocket wifi (medium 6.8)
- [CVE-2012-0313](https://insights.sbomify.com/CVE-2012-0313/): Cross-site scripting in glucose:glucose 2 (medium 4.3)
- [CVE-2012-0312](https://insights.sbomify.com/CVE-2012-0312/): Cross-site scripting in oscommerce:online merchant (medium 4.3)
- [CVE-2012-0311](https://insights.sbomify.com/CVE-2012-0311/): Cross-site scripting in oscommerce:oscommerce (medium 4.3)
- [CVE-2012-0310](https://insights.sbomify.com/CVE-2012-0310/): Other in cogentdatahub:cascade datahub (medium 5.8)
- [CVE-2012-0309](https://insights.sbomify.com/CVE-2012-0309/): Cross-site scripting in cogentdatahub:cascade datahub (medium 4.3)
- [CVE-2012-0308](https://insights.sbomify.com/CVE-2012-0308/): Cross-site request forgery in symantec:messaging gateway (medium 6.8)
- [CVE-2012-0307](https://insights.sbomify.com/CVE-2012-0307/): Cross-site scripting in symantec:messaging gateway (medium 4.3)
- [CVE-2012-0306](https://insights.sbomify.com/CVE-2012-0306/): Memory corruption in symantec:ghost solutions suite (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/52/