GCVE - cpe:2.3:a:patterninsight:pattern

Approved changes feed: RSS · Atom

cpe:2.3:a:patterninsight:pattern_insight:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

Vendor	Patterninsight (`8097b542-1f52-5a68-8fc9-a98610b89c3e`)
Product	Pattern Insight (`7edc4476-02d4-5ef9-8f0d-c6b6cadeb8b3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4950`	vulnerable	2026-06-08 05:02:53.330682	Details available Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages. Published: 2012-11-18T21:00:00.000Z Updated: 2024-08-06T20:50:18.055Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/79787 http://www.kb.cert.org/vuls/id/802596 http://osvdb.org/87053 http://www.securityfocus.com/bid/56381 http://secunia.com/advisories/51203	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4938`	vulnerable	2026-06-08 05:02:53.297016	Details available Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message. Published: 2012-11-18T21:00:00.000Z Updated: 2024-08-06T20:50:18.219Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/802596 https://exchange.xforce.ibmcloud.com/vulnerabilities/79786 http://www.securityfocus.com/bid/56381 http://secunia.com/advisories/51203	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4937`	vulnerable	2026-06-08 05:02:53.296716	Details available Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie. Published: 2012-11-18T21:00:00.000Z Updated: 2024-08-06T20:50:18.176Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/802596 https://exchange.xforce.ibmcloud.com/vulnerabilities/79785 http://www.securityfocus.com/bid/56381 http://secunia.com/advisories/51203	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4936`	vulnerable	2026-06-08 05:02:53.296388	Details available The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element. Published: 2012-11-18T21:00:00.000Z Updated: 2024-08-06T20:50:18.264Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/802596 http://www.securityfocus.com/bid/56381 http://secunia.com/advisories/51203 https://exchange.xforce.ibmcloud.com/vulnerabilities/79784	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4935`	vulnerable	2026-06-08 05:02:53.295922	Details available Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentication of arbitrary users. Published: 2012-11-18T21:00:00.000Z Updated: 2024-08-06T20:50:18.397Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/79783 http://www.kb.cert.org/vuls/id/802596 http://www.securityfocus.com/bid/56381 http://secunia.com/advisories/51203	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Pattern Insight

Notes

PURL mappings

Vulnerability references

Contribute