CVE-2012-2536: Microsoft System Center Configuration Manager

Medium severity, CVSS 4.3. EPSS: 16.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."

Affected products

• Microsoft System Center Configuration Manager: version 2007 only
• Microsoft Systems Management Server: version 2003 only

Published 2012-09-11. Last modified 2026-06-16.