CVE-2012-3351 - CVE House
Back to Database
Status published Medium CVE-2012-3351

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-3351

Credits & Attribution

No credits recorded in the NVD database.

References

More from longtailvideo

View All →
CVE-2014-4030
Cross-site request forgery (CSRF) vulnerability in the JW Player plugin...
Medium 6.8
CVE-2012-2904
player.swf in LongTail JW Player 5.9 allows remote attackers to...
Medium 4.3

Affected Vendor

longtailvideo

View all reports →

Affected Software

jw player
Vulnerable Versions:
0

Timeline

Official Publish: February 20th, 2020
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.