CVE-2012-0325

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

Published: 2012-03-09 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2012-0325 is rated Low Risk (30.9/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.21%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2012-0325

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-03-30 0.45% 0.21% -0.24%
2 2025-03-29 0.21% 0.45% +0.24%
3 2025-03-25 — 0.21% —

Full EPSS history (6 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2012-0325

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
 8.6 2.9 [email protected]

Weakness enumeration for CVE-2012-0325

GitHub Security Advisory for CVE-2012-0325

GHSA-cc55-c9j4-m7cx · Severity: low · Ecosystem: maven — Jenkins allows Cross-Site Scripting (XSS)

OS Trackers for CVE-2012-0325

vendor priority summary link
ubuntu medium CVE-2012-0325 medium priority: Ubuntu including 1 source packages (jenkins), 9 status rows across 9 suites (hardy, lucid, maverick, natty, oneiric, precise, quantal, raring, upstream): DNE 4, not-affected 3, ignored 1, released 1. https://ubuntu.com/security/CVE-2012-0325

Affected software / configurations for CVE-2012-0325

Vendor Product Version Raw CPE
cloudbees jenkins <= 1.453 cpe:2.3:a:cloudbees:jenkins:*:*:*:*:*:*:*:*
jenkins jenkins 1.301 cpe:2.3:a:jenkins:jenkins:1.301:*:*:*:*:*:*:*
jenkins jenkins 1.302 cpe:2.3:a:jenkins:jenkins:1.302:*:*:*:*:*:*:*
jenkins jenkins 1.303 cpe:2.3:a:jenkins:jenkins:1.303:*:*:*:*:*:*:*
jenkins jenkins 1.304 cpe:2.3:a:jenkins:jenkins:1.304:*:*:*:*:*:*:*
jenkins jenkins 1.305 cpe:2.3:a:jenkins:jenkins:1.305:*:*:*:*:*:*:*
jenkins jenkins 1.306 cpe:2.3:a:jenkins:jenkins:1.306:*:*:*:*:*:*:*
jenkins jenkins 1.307 cpe:2.3:a:jenkins:jenkins:1.307:*:*:*:*:*:*:*
jenkins jenkins 1.308 cpe:2.3:a:jenkins:jenkins:1.308:*:*:*:*:*:*:*
jenkins jenkins 1.309 cpe:2.3:a:jenkins:jenkins:1.309:*:*:*:*:*:*:*
jenkins jenkins 1.310 cpe:2.3:a:jenkins:jenkins:1.310:*:*:*:*:*:*:*
jenkins jenkins 1.311 cpe:2.3:a:jenkins:jenkins:1.311:*:*:*:*:*:*:*
jenkins jenkins 1.312 cpe:2.3:a:jenkins:jenkins:1.312:*:*:*:*:*:*:*
jenkins jenkins 1.313 cpe:2.3:a:jenkins:jenkins:1.313:*:*:*:*:*:*:*
jenkins jenkins 1.314 cpe:2.3:a:jenkins:jenkins:1.314:*:*:*:*:*:*:*
jenkins jenkins 1.315 cpe:2.3:a:jenkins:jenkins:1.315:*:*:*:*:*:*:*
jenkins jenkins 1.316 cpe:2.3:a:jenkins:jenkins:1.316:*:*:*:*:*:*:*
jenkins jenkins 1.317 cpe:2.3:a:jenkins:jenkins:1.317:*:*:*:*:*:*:*
jenkins jenkins 1.318 cpe:2.3:a:jenkins:jenkins:1.318:*:*:*:*:*:*:*
jenkins jenkins 1.319 cpe:2.3:a:jenkins:jenkins:1.319:*:*:*:*:*:*:*
jenkins jenkins 1.320 cpe:2.3:a:jenkins:jenkins:1.320:*:*:*:*:*:*:*
jenkins jenkins 1.321 cpe:2.3:a:jenkins:jenkins:1.321:*:*:*:*:*:*:*
jenkins jenkins 1.322 cpe:2.3:a:jenkins:jenkins:1.322:*:*:*:*:*:*:*
jenkins jenkins 1.323 cpe:2.3:a:jenkins:jenkins:1.323:*:*:*:*:*:*:*
jenkins jenkins 1.324 cpe:2.3:a:jenkins:jenkins:1.324:*:*:*:*:*:*:*
jenkins jenkins 1.325 cpe:2.3:a:jenkins:jenkins:1.325:*:*:*:*:*:*:*
jenkins jenkins 1.326 cpe:2.3:a:jenkins:jenkins:1.326:*:*:*:*:*:*:*
jenkins jenkins 1.327 cpe:2.3:a:jenkins:jenkins:1.327:*:*:*:*:*:*:*
jenkins jenkins 1.328 cpe:2.3:a:jenkins:jenkins:1.328:*:*:*:*:*:*:*
jenkins jenkins 1.329 cpe:2.3:a:jenkins:jenkins:1.329:*:*:*:*:*:*:*
jenkins jenkins 1.330 cpe:2.3:a:jenkins:jenkins:1.330:*:*:*:*:*:*:*
jenkins jenkins 1.331 cpe:2.3:a:jenkins:jenkins:1.331:*:*:*:*:*:*:*
jenkins jenkins 1.332 cpe:2.3:a:jenkins:jenkins:1.332:*:*:*:*:*:*:*
jenkins jenkins 1.333 cpe:2.3:a:jenkins:jenkins:1.333:*:*:*:*:*:*:*
jenkins jenkins 1.334 cpe:2.3:a:jenkins:jenkins:1.334:*:*:*:*:*:*:*
jenkins jenkins 1.335 cpe:2.3:a:jenkins:jenkins:1.335:*:*:*:*:*:*:*
jenkins jenkins 1.336 cpe:2.3:a:jenkins:jenkins:1.336:*:*:*:*:*:*:*
jenkins jenkins 1.337 cpe:2.3:a:jenkins:jenkins:1.337:*:*:*:*:*:*:*
jenkins jenkins 1.338 cpe:2.3:a:jenkins:jenkins:1.338:*:*:*:*:*:*:*
jenkins jenkins 1.339 cpe:2.3:a:jenkins:jenkins:1.339:*:*:*:*:*:*:*
jenkins jenkins 1.340 cpe:2.3:a:jenkins:jenkins:1.340:*:*:*:*:*:*:*
jenkins jenkins 1.341 cpe:2.3:a:jenkins:jenkins:1.341:*:*:*:*:*:*:*
jenkins jenkins 1.342 cpe:2.3:a:jenkins:jenkins:1.342:*:*:*:*:*:*:*
jenkins jenkins 1.343 cpe:2.3:a:jenkins:jenkins:1.343:*:*:*:*:*:*:*
jenkins jenkins 1.344 cpe:2.3:a:jenkins:jenkins:1.344:*:*:*:*:*:*:*
jenkins jenkins 1.345 cpe:2.3:a:jenkins:jenkins:1.345:*:*:*:*:*:*:*
jenkins jenkins 1.346 cpe:2.3:a:jenkins:jenkins:1.346:*:*:*:*:*:*:*
jenkins jenkins 1.347 cpe:2.3:a:jenkins:jenkins:1.347:*:*:*:*:*:*:*
jenkins jenkins 1.348 cpe:2.3:a:jenkins:jenkins:1.348:*:*:*:*:*:*:*
jenkins jenkins 1.349 cpe:2.3:a:jenkins:jenkins:1.349:*:*:*:*:*:*:*
jenkins jenkins 1.350 cpe:2.3:a:jenkins:jenkins:1.350:*:*:*:*:*:*:*
jenkins jenkins 1.351 cpe:2.3:a:jenkins:jenkins:1.351:*:*:*:*:*:*:*
jenkins jenkins 1.352 cpe:2.3:a:jenkins:jenkins:1.352:*:*:*:*:*:*:*
jenkins jenkins 1.353 cpe:2.3:a:jenkins:jenkins:1.353:*:*:*:*:*:*:*
jenkins jenkins 1.354 cpe:2.3:a:jenkins:jenkins:1.354:*:*:*:*:*:*:*
jenkins jenkins 1.355 cpe:2.3:a:jenkins:jenkins:1.355:*:*:*:*:*:*:*
jenkins jenkins 1.356 cpe:2.3:a:jenkins:jenkins:1.356:*:*:*:*:*:*:*
jenkins jenkins 1.357 cpe:2.3:a:jenkins:jenkins:1.357:*:*:*:*:*:*:*
jenkins jenkins 1.358 cpe:2.3:a:jenkins:jenkins:1.358:*:*:*:*:*:*:*
jenkins jenkins 1.359 cpe:2.3:a:jenkins:jenkins:1.359:*:*:*:*:*:*:*
jenkins jenkins 1.360 cpe:2.3:a:jenkins:jenkins:1.360:*:*:*:*:*:*:*
jenkins jenkins 1.361 cpe:2.3:a:jenkins:jenkins:1.361:*:*:*:*:*:*:*
jenkins jenkins 1.362 cpe:2.3:a:jenkins:jenkins:1.362:*:*:*:*:*:*:*
jenkins jenkins 1.363 cpe:2.3:a:jenkins:jenkins:1.363:*:*:*:*:*:*:*
jenkins jenkins 1.364 cpe:2.3:a:jenkins:jenkins:1.364:*:*:*:*:*:*:*
jenkins jenkins 1.365 cpe:2.3:a:jenkins:jenkins:1.365:*:*:*:*:*:*:*
jenkins jenkins 1.366 cpe:2.3:a:jenkins:jenkins:1.366:*:*:*:*:*:*:*
jenkins jenkins 1.367 cpe:2.3:a:jenkins:jenkins:1.367:*:*:*:*:*:*:*
jenkins jenkins 1.368 cpe:2.3:a:jenkins:jenkins:1.368:*:*:*:*:*:*:*
jenkins jenkins 1.369 cpe:2.3:a:jenkins:jenkins:1.369:*:*:*:*:*:*:*
jenkins jenkins 1.370 cpe:2.3:a:jenkins:jenkins:1.370:*:*:*:*:*:*:*
jenkins jenkins 1.371 cpe:2.3:a:jenkins:jenkins:1.371:*:*:*:*:*:*:*
jenkins jenkins 1.372 cpe:2.3:a:jenkins:jenkins:1.372:*:*:*:*:*:*:*
jenkins jenkins 1.373 cpe:2.3:a:jenkins:jenkins:1.373:*:*:*:*:*:*:*
jenkins jenkins 1.374 cpe:2.3:a:jenkins:jenkins:1.374:*:*:*:*:*:*:*
jenkins jenkins 1.375 cpe:2.3:a:jenkins:jenkins:1.375:*:*:*:*:*:*:*
jenkins jenkins 1.376 cpe:2.3:a:jenkins:jenkins:1.376:*:*:*:*:*:*:*
jenkins jenkins 1.377 cpe:2.3:a:jenkins:jenkins:1.377:*:*:*:*:*:*:*
jenkins jenkins 1.378 cpe:2.3:a:jenkins:jenkins:1.378:*:*:*:*:*:*:*
jenkins jenkins 1.379 cpe:2.3:a:jenkins:jenkins:1.379:*:*:*:*:*:*:*

References for CVE-2012-0325

cvelogic Threat Intelligence