CVE-2012-2520: microsoft groove_server Cross-site Scripting

EPSS trend

Probability

34.28%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

+5.80 pp

From 28.48% on 18-09-2026

18-09-202618-10-2026

EPSS score

34.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.securityfocus.com/bid/55797VDB EntryX Refsource BIDThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14976VDB EntrySignatureX Refsource OVAL
www.securitytracker.com/id?1027628VDB EntryX Refsource SECTRACKThird Party Advisory
www.securitytracker.com/id?1027626VDB EntryX Refsource SECTRACKThird Party Advisory
www.securitytracker.com/id?1027629VDB EntryX Refsource SECTRACKThird Party Advisory
www.securitytracker.com/id?1027627VDB EntryX Refsource SECTRACKThird Party Advisory
www.us-cert.gov/cas/techalerts/TA12-283A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-066Vendor AdvisoryX Refsource MS
www.securitytracker.com/id?1027625VDB EntryX Refsource SECTRACKThird Party Advisory

Related vulnerabilities

CVE-2018-8311microsoftlync+316.87%8y ago11-07-2018 00:00A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.CVE-2018-8173microsoftinfopath+119.59%8y ago09-05-2018 19:00A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka "Microsoft InfoPath Remote Code Execution Vulnerability." This affects Microsoft Infopath.CVE-2018-8546microsoftlync+85.46%7y ago14-11-2018 01:00A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.CVE-2018-8238microsoftlync+35.99%8y ago11-07-2018 00:00A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.CVE-2013-1302microsoftlync+221.91%13y ago15-05-2013 01:00Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."CVE-2013-1289microsoftgroove_server+415.43%13y ago09-04-2013 22:00Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

All vulnerabilities ingroove_server infopath lync office_communicator office_web_apps

CVE-2012-2520: microsoft groove_server Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References