# CVEs published 2012-12-08

5 CVEs were published on December 8, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3297](https://cve.now/CVE-2012-3297.md): Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV- (no CVSS)
- [CVE-2012-4687](https://cve.now/CVE-2012-4687.md): Post Oak Bluetooth Traffic Systems Insufficient Entropy (no CVSS, Post Oak Traffic Systems AWAM Bluetooth Reader Traffic Syst…)
- [CVE-2012-4690](https://cve.now/CVE-2012-4690.md): Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platfo (no CVSS)
- [CVE-2012-4838](https://cve.now/CVE-2012-4838.md): IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information (no CVSS)
- [CVE-2012-4857](https://cve.now/CVE-2012-4857.md): Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.