# CVEs published 2012-06-20

20 CVEs were published on June 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2493](https://cve.now/CVE-2012-2493.md): The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x (no CVSS)
- [CVE-2012-2494](https://cve.now/CVE-2012-2494.md): The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 (no CVSS)
- [CVE-2012-2495](https://cve.now/CVE-2012-2495.md): The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.602 (no CVSS)
- [CVE-2012-2496](https://cve.now/CVE-2012-2496.md): A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3. (no CVSS)
- [CVE-2012-3058](https://cve.now/CVE-2012-3058.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, wit (no CVSS)
- [CVE-2012-3063](https://cve.now/CVE-2012-3063.md): Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a ma (no CVSS)
- [CVE-2011-1923](https://cve.now/CVE-2011-1923.md): The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes (no CVSS)
- [CVE-2011-5095](https://cve.now/CVE-2011-5095.md): The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, w (no CVSS)
- [CVE-2012-3790](https://cve.now/CVE-2012-3790.md): Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to (no CVSS)
- [CVE-2012-0716](https://cve.now/CVE-2012-0716.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote (no CVSS)
- [CVE-2012-0717](https://cve.now/CVE-2012-0717.md): IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote a (no CVSS)
- [CVE-2012-0720](https://cve.now/CVE-2012-0720.md): Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Serv (no CVSS)
- [CVE-2012-2159](https://cve.now/CVE-2012-2159.md): Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Da (no CVSS)
- [CVE-2012-2161](https://cve.now/CVE-2012-2161.md): Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x a (no CVSS)
- [CVE-2012-2170](https://cve.now/CVE-2012-2170.md): The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote (no CVSS)
- [CVE-2012-2173](https://cve.now/CVE-2012-2173.md): The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a (no CVSS)
- [CVE-2012-2174](https://cve.now/CVE-2012-2174.md): The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. (no CVSS)
- [CVE-2012-2175](https://cve.now/CVE-2012-2175.md): Buffer overflow in the Attachment\_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows (no CVSS)
- [CVE-2012-2180](https://cve.now/CVE-2012-2180.md): The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 al (no CVSS)
- [CVE-2012-2192](https://cve.now/CVE-2012-2192.md): The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.