GCVE - cpe:2.3:a:redhat:certificate_system:8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:certificate_system:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Certificate System (`b4920ad9-7162-5871-b579-8ee5ea5b68a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4556`	vulnerable	2026-06-08 05:02:51.478353	Details available The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query. Published: 2013-01-04T22:00:00.000Z Updated: 2024-08-06T20:42:55.164Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027846 http://rhn.redhat.com/errata/RHSA-2012-1550.html https://bugzilla.redhat.com/show_bug.cgi?id=869579 http://secunia.com/advisories/51482 http://www.securityfocus.com/bid/56843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4555`	vulnerable	2026-06-08 05:02:51.477943	Details available The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors. Published: 2013-01-04T22:00:00.000Z Updated: 2024-08-06T20:42:54.969Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027846 http://rhn.redhat.com/errata/RHSA-2012-1550.html https://bugzilla.redhat.com/show_bug.cgi?id=869570 http://secunia.com/advisories/51482 http://www.securityfocus.com/bid/56843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4543`	vulnerable	2026-06-08 05:02:51.381307	Details available Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script. Published: 2013-01-04T22:00:00.000Z Updated: 2024-08-06T20:42:55.068Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=864397 http://www.securitytracker.com/id?1027846 http://rhn.redhat.com/errata/RHSA-2012-1550.html http://secunia.com/advisories/51482 http://www.securityfocus.com/bid/56843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3367`	vulnerable	2026-06-08 05:02:09.385577	Details available Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate. Published: 2012-08-13T20:00:00.000Z Updated: 2024-08-06T20:05:12.335Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=836268 http://www.securitytracker.com/id?1027284 http://osvdb.org/84098 http://secunia.com/advisories/50013 https://fedorahosted.org/pki/changeset/2430	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2662`	vulnerable	2026-06-08 05:02:05.276050	Details available Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages. Published: 2012-08-13T20:00:00.000Z Updated: 2024-08-06T19:42:31.591Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027284 https://exchange.xforce.ibmcloud.com/vulnerabilities/77101 http://rhn.redhat.com/errata/RHSA-2015-1347.html http://secunia.com/advisories/50013 http://osvdb.org/84099	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.