CVE Feed

    Dashboard / CVE / CVE-2012-6662

    CVE-2012-6662

    Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.

    Published:Nov 27, 2012
    Last Modified:Apr 12, 2025
    EPS:Nov 24, 2014
    EPSS Score:0.06276
    CVSS Score:4.3

    Affected Products

    Vendor
    Jqueryui
    Product
    Jquery Ui
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Hpc Node
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-30875 (CVSS 7.1) — Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain…
    CVE-2022-31160 (CVSS 6.1) — jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery…
    CVE-2021-41184 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `…
    CVE-2021-41182 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `…
    CVE-2021-41183 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of vario…
    CVE-2016-7103 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arb…
    CVE-2010-5312 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.…

    References

    http://bugs.jqueryui.com/ticket/8859
    http://bugs.jqueryui.com/ticket/8861
    http://rhn.redhat.com/errata/RHSA-2015-0442.html
    http://rhn.redhat.com/errata/RHSA-2015-1462.html
    http://seclists.org/oss-sec/2014/q4/613
    http://seclists.org/oss-sec/2014/q4/616
    http://www.securityfocus.com/bid/71107
    https://exchange.xforce.ibmcloud.com/vulnerabilities/98697
    https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e
    https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde
    https://github.com/jquery/jquery/issues/2432
    http://bugs.jqueryui.com/ticket/8859
    http://bugs.jqueryui.com/ticket/8861
    http://rhn.redhat.com/errata/RHSA-2015-0442.html
    http://rhn.redhat.com/errata/RHSA-2015-1462.html
    http://seclists.org/oss-sec/2014/q4/613
    http://seclists.org/oss-sec/2014/q4/616
    http://www.securityfocus.com/bid/71107
    https://exchange.xforce.ibmcloud.com/vulnerabilities/98697
    https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e
    https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde
    https://github.com/jquery/jquery/issues/2432

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High