{"api_version":"1","generated_at":"2026-07-23T03:23:13+00:00","cve":"CVE-2012-0263","urls":{"html":"https://cve.report/CVE-2012-0263","api":"https://cve.report/api/cve/CVE-2012-0263.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-0263","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0263"},"summary":{"title":"CVE-2012-0263","description":"monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-12-31 20:55:15","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/47344","name":"http://secunia.com/advisories/47344","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2012/Jan/62","name":"http://seclists.org/fulldisclosure/2012/Jan/62","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: OP5 Monitor - Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf","name":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Parked at Loopia","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.osvdb.org/78067","name":"http://www.osvdb.org/78067","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/","name":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fixed vulnerabilities for op5 Monitor and op5 Appliance | op5","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://bugs.op5.com/view.php?id=5094","name":"https://bugs.op5.com/view.php?id=5094","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0263","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0263","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"263","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"op5","cpe5":"monitor","cpe6":"5.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"263","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"op5","cpe5":"monitor","cpe6":"5.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"263","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"op5","cpe5":"monitor","cpe6":"5.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"263","vulnerable":"1","versionEndIncluding":"5.5.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"op5","cpe5":"monitor","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2012","cve_id":"263","cve":"CVE-2012-0263","epss":"0.004280000","percentile":"0.625300000","score_date":"2026-04-30","updated_at":"2026-05-01 00:10:53"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T18:16:20.085Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"78067","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/78067"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.op5.com/view.php?id=5094"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/"},{"name":"47344","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47344"},{"name":"20120107 OP5 Monitor - Multiple Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2012/Jan/62"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-01-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-01-29T17:57:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"78067","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/78067"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.op5.com/view.php?id=5094"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/"},{"name":"47344","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47344"},{"name":"20120107 OP5 Monitor - Multiple Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2012/Jan/62"},{"tags":["x_refsource_MISC"],"url":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-0263","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"78067","refsource":"OSVDB","url":"http://www.osvdb.org/78067"},{"name":"https://bugs.op5.com/view.php?id=5094","refsource":"CONFIRM","url":"https://bugs.op5.com/view.php?id=5094"},{"name":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/","refsource":"CONFIRM","url":"http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/"},{"name":"47344","refsource":"SECUNIA","url":"http://secunia.com/advisories/47344"},{"name":"20120107 OP5 Monitor - Multiple Vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2012/Jan/62"},{"name":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf","refsource":"MISC","url":"http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-0263","datePublished":"2013-12-31T20:00:00.000Z","dateReserved":"2011-12-21T00:00:00.000Z","dateUpdated":"2024-08-06T18:16:20.085Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-12-31 20:55:15","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.0","matchCriteriaId":"B57AA6A1-CF28-46DC-80FA-67F1023933EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5249E2B6-4B2B-4A4D-9C39-8362B422B0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"108F8953-B90D-4341-8AD5-39E94F7F320B"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"14C73510-4999-4C96-9705-59274F97BA77"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"263","Ordinal":"1","Title":"CVE-2012-0263","CVE":"CVE-2012-0263","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"263","Ordinal":"1","NoteData":"monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.","Type":"Description","Title":"CVE-2012-0263"},{"CveYear":"2012","CveId":"263","Ordinal":"2","NoteData":"2013-12-31","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"263","Ordinal":"3","NoteData":"2014-01-29","Type":"Other","Title":"Modified"}]}}}