CVE-2012-2422: Intuit Quickbooks

Low severity, CVSS 2.9. EPSS: 1.1% chance of exploitation in the next 30 days.

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.

Affected products

• Intuit Quickbooks: version 2009 only; version 2010 only; version 2011 only; version 2012 only

Published 2012-04-25. Last modified 2026-06-16.