CVE-2012-4950

MEDIUM 4.3CVE-2012-4950 · Published 18/11/2012 · updated 16/06/2026

In short

CVE-2012-4950 is a MEDIUM (CVSS 4.3) vulnerability affecting pattern insight (patterninsight).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pattern insight patterninsight	`= 2.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages.

References

osvdb.org/87053
secunia.com/advisories/51203
kb.cert.org/vuls/id/802596 · US Government Resource
securityfocus.com/bid/56381
exchange.xforce.ibmcloud.com/vulnerabilities/79787

More vulnerabilities in pattern insight

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free