CVE-2012-1065 json
Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote at…
published 2012-02-14 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-1102
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 89%
- public exploits
- 1
- Exploit-DB
Summary
Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method.
Timeline
- Published
- First public exploit (EDB-18625)
Exploit prediction
3.77% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-18625 2X ApplicationServer 10.1 - TuxSystem Class ActiveX Control Remote File Overwrite remote, 2012-03-19
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
References
-
secunia.com
/advisories/47657
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/72947
vdb-entry
-
osvdb.org
/78831
vdb-entry
-
securityfocus.com
/bid/51856
vdb-entry
Sources
- CVE List CVE-2012-1065
- NVD CVE-2012-1065
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.