{"api_version":"1","generated_at":"2026-07-23T02:37:39+00:00","cve":"CVE-2012-2768","urls":{"html":"https://cve.report/CVE-2012-2768","api":"https://cve.report/api/cve/CVE-2012-2768.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-2768","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2768"},"summary":{"title":"CVE-2012-2768","description":"Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2012-08-15 21:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/50024","name":"http://secunia.com/advisories/50024","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Alerts - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/54689","name":"http://www.securityfocus.com/bid/54689","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RT RTFM Extension Topic Administration Page Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/50440","name":"http://secunia.com/advisories/50440","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA50440 - Debian update for rtfm - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html","name":"http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"[rt-announce] Security vulnerabilities in three commonly deployed\tRT extensions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77212","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77212","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2768","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2768","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2768","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"best_practical_solutions","cpe5":"request_tracker","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T19:42:32.449Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"54689","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/54689"},{"name":"50440","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/50440"},{"name":"50024","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/50024"},{"name":"rtfm-unspec-xss(77212)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77212"},{"name":"[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-07-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"54689","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/54689"},{"name":"50440","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/50440"},{"name":"50024","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/50024"},{"name":"rtfm-unspec-xss(77212)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77212"},{"name":"[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-2768","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"54689","refsource":"BID","url":"http://www.securityfocus.com/bid/54689"},{"name":"50440","refsource":"SECUNIA","url":"http://secunia.com/advisories/50440"},{"name":"50024","refsource":"SECUNIA","url":"http://secunia.com/advisories/50024"},{"name":"rtfm-unspec-xss(77212)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77212"},{"name":"[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions","refsource":"MLIST","url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-2768","datePublished":"2012-08-15T21:00:00.000Z","dateReserved":"2012-05-18T00:00:00.000Z","dateUpdated":"2024-08-06T19:42:32.449Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-08-15 21:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"551E363E-C32E-4200-8BDA-B32F4449EA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F95BB00B-B22F-4AB3-A578-576876203FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"42B3DD1D-9C66-4E73-8A21-7196FBCE9949"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4AA68147-5BF1-4462-B45F-3E1BC08C03DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"53DC7E7D-50F3-46AB-8338-F7C9DB4C0FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C580B2B7-D752-4F78-B436-1F57D03B2F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D5DEE593-A59D-4078-BC63-B13A78AA28D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"01C0904A-06CE-48F8-B693-0DB5B56B9033"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"1C1D477B-91E1-4FD4-A8D0-C67965686231"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B81EE06C-2DC5-4413-88A6-98F54EFDBC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"C346E237-1CC9-4DDC-9992-E840D9A7E6D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:best_practical_solutions:request_tracker:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DE3D2F1F-9B74-4D9A-B1ED-A68638661790"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"2768","Ordinal":"1","Title":"CVE-2012-2768","CVE":"CVE-2012-2768","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"2768","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2012-2768"},{"CveYear":"2012","CveId":"2768","Ordinal":"2","NoteData":"2012-08-15","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"2768","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}