CVE-2012-2536

Medium

Description

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."

SeverityMedium

CVSS4.3

Exploit probability—

Product

Microsoft System Center Configuration Manager

PublishedSep 11, 2012

First seenSep 11, 2012

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062

Affected products

Product	Affected versions	Fixed in
microsoft system_center_configuration_manager	2007	—
microsoft systems_management_server	2003	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.