Test ID:	1.3.6.1.4.1.25623.1.0.808275
Category:	Web application abuses
Title:	Jenkins Multiple Cross Site Scripting Vulnerabilities (Mar 2012) - Windows
Summary:	Jenkins is prone to multiple cross-site scripting vulnerabilities.
Description:	Summary: Jenkins is prone to multiple cross-site scripting vulnerabilities. Vulnerability Insight: Multiple flaws exist due to multiple input validation errors. Vulnerability Impact: Successful exploitation will allow remote attackers to inject malicious HTMLs to pages served by Jenkins. This allows an attacker to escalate his privileges by hijacking sessions of other users. Affected Software/OS: Jenkins main line 1.452 and prior, Jenkins LTS 1.424.3 and prior. Solution: Jenkins main line users should update to 1.454, Jenkins LTS users should update to 1.424.6. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0324 BugTraq ID: 52384 http://www.securityfocus.com/bid/52384 http://jvn.jp/en/jp/JVN14791558/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2012-000022 Common Vulnerability Exposure (CVE) ID: CVE-2012-0325 http://jvn.jp/en/jp/JVN79950061/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.