SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2012-2731

LOW · CVSS 2.6 EPSS 2.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-06-27 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. It affects Java. It may be remotely exploitable.

CVE
CVE-2012-2731
Severity
LOW
CVSS
2.6
EPSS
2.17%
Java

Original NVD Description

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.