# CVEs published 2012-06-08

12 CVEs were published on June 8, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1814](https://cve.now/CVE-2012-1814.md): Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV… (no CVSS)
- [CVE-2012-1815](https://cve.now/CVE-2012-1815.md): SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific… (no CVSS)
- [CVE-2012-1816](https://cve.now/CVE-2012-1816.md): PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6… (no CVSS)
- [CVE-2012-1817](https://cve.now/CVE-2012-1817.md): Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph… (no CVSS)
- [CVE-2012-1818](https://cve.now/CVE-2012-1818.md): An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials… (no CVSS)
- [CVE-2012-2595](https://cve.now/CVE-2012-2595.md): Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote… (no CVSS)
- [CVE-2012-2596](https://cve.now/CVE-2012-2596.md): The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special… (no CVSS)
- [CVE-2012-2597](https://cve.now/CVE-2012-2597.md): Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary… (no CVSS)
- [CVE-2012-2598](https://cve.now/CVE-2012-2598.md): Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2012-3003](https://cve.now/CVE-2012-3003.md): Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect… (no CVSS)
- [CVE-2012-1826](https://cve.now/CVE-2012-1826.md): dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template. (no CVSS, com.dotcms:dotcms)
- [CVE-2012-2603](https://cve.now/CVE-2012-2603.md): The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.