cve-2012-0791
csaf_suse
Description
SUSE CVE-2012-0791
Timeline
- Published
- 2023-02-15 05:48 UTC
- Last Modified
- 2025-07-08
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SUSE CVE-2012-0791",
"title": "Title"
},
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.",
"title": "Description of the CVE"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0791",
"url": "https://www.suse.com/security/cve/CVE-2012-0791"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 742804 for CVE-2012-0791",
"url": "https://bugzilla.suse.com/742804"
},
{
"category": "external",
"summary": "Advisory link for openSUSE-SU-2012:0287-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X53IX7EM2XI6NS6IUP5ODLQMT3FWCDLF/#X53IX7EM2XI6NS6IUP5ODLQMT3FWCDLF"
}
],
"title": "SUSE CVE CVE-2012-0791",
"tracking": {
"current_release_date": "2025-07-08T00:29:29Z",
"generator": {
"date": "2023-02-15T05:48:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf-vex.pl",
"version": "1"
}
},
"id": "CVE-2012-0791",
"initial_release_date": "2023-02-15T05:48:35Z",
"revision_history": [
{
"date": "2023-02-15T05:48:35Z",
"number": "2",
"summary": "Current version"
},
{
"date": "2023-12-08T05:03:04Z",
"number": "3",
"summary": "Current version"
},
{
"date": "2023-12-09T03:28:58Z",
"number": "4",
"summary": "Current version"
},
{
"date": "2025-03-16T14:05:10Z",
"number": "5",
"summary": "Current version"
},
{
"date": "2025-07-08T00:29:29Z",
"number": "6",
"summary": "Current version"
}
],
"status": "interim",
"version": "6"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
},
{
"category": "product_version",
"name": "horde5-imp-6.2.5-1.2",
"product": {
"name": "horde5-imp-6.2.5-1.2",
"product_id": "horde5-imp-6.2.5-1.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/horde5-imp@6.2.5-1.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "horde5-imp-6.2.5-1.2 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:horde5-imp-6.2.5-1.2"
},
"product_reference": "horde5-imp-6.2.5-1.2",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-0791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0791"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:horde5-imp-6.2.5-1.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0791",
"url": "https://www.suse.com/security/cve/CVE-2012-0791"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 742804 for CVE-2012-0791",
"url": "https://bugzilla.suse.com/742804"
},
{
"category": "external",
"summary": "Advisory link for openSUSE-SU-2012:0287-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X53IX7EM2XI6NS6IUP5ODLQMT3FWCDLF/#X53IX7EM2XI6NS6IUP5ODLQMT3FWCDLF"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:horde5-imp-6.2.5-1.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-06-28T06:29:44Z",
"details": "moderate"
}
],
"title": "CVE-2012-0791"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)