CVE-2012-1892

MEDIO 4.3CVE-2012-1892 · Published 11/09/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
visual studio team foundation server microsoft	`= 2010`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."

References

secunia.com/advisories/50463
securityfocus.com/bid/55409
securitytracker.com/id
us-cert.gov/cas/techalerts/TA12-255A.html · US Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free