vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2012-4451

MEDIUM
6.1
CVSS Score
Published: January 3, 2020 at 04:03 PM UTC
Updated: June 16, 2026 at 11:45 PM UTC
3 products affected across 3 vendorsFedoraEnterprise LinuxZend Framework

Using Zend Framework by Zend Technologies?

Get instant alerts when new vulnerabilities affect Zend Framework - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.1
Exploit prediction
EPSS 1%

Description

Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora· Fedora Projectrpm
95%
1617
Enterprise Linux· Red Hatrpm
95%
6.0
Zend Framework· Zend
95%
v < 2.0.12.0 ≤ v < 2.0.1
Affected range stops below 2.0.1, so it looks safe — our inference, not a vendor statement

References (8)

x_refsource_MISCVendor Advisory
Source: [email protected]
http://framework.zend.com/security/advisory/ZF2012-03
x_refsource_MISCMailing ListPatchThird Party Advisory
Source: [email protected]
http://seclists.org/oss-sec/2012/q3/571
x_refsource_MISCMailing ListPatchThird Party Advisory
Source: [email protected]
http://seclists.org/oss-sec/2012/q3/573
x_refsource_MISCThird Party AdvisoryVDB Entry
Source: [email protected]
http://www.securityfocus.com/bid/55636
x_refsource_MISCMailing ListThird Party Advisory
Source: [email protected]
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://bugs.gentoo.org/show_bug.cgi?id=436210
x_refsource_MISCIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=860738
x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733

CVSS

6.1MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card