{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T22:34:47.680","vulnerabilities":[{"cve":{"id":"CVE-2012-4395","sourceIdentifier":"secalert@redhat.com","published":"2012-09-05T23:55:03.007","lastModified":"2026-06-16T23:44:56.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ownCloud anterior a v4.0.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro redirect_url"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"6414E8A4-F82F-44DF-A51A-B1482AE4BFB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE37D0-74E5-4D66-8A2D-DA177936A4F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB0E5BB3-900E-4D95-B302-4120567B6155"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E1BB82C7-11E5-44E4-9029-76AE1F4AE937"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D77D4260-0D48-47EE-A09B-FC200CB36A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78FEEBC0-9483-4EBE-B6E4-5390144A36F5"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/08/11/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/09/02/2","source":"secalert@redhat.com"},{"url":"https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2012/08/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/09/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}}]}