CVE-2012-2927

no score yetEPSS 1.2%

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2012-05-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tm_software:tempo
tm_software:tempo6.3.0
tm_software:tempo6.3.2

References

http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17
http://osvdb.org/81993
http://secunia.com/advisories/49166
http://www.securityfocus.com/bid/53595
https://exchange.xforce.ibmcloud.com/vulnerabilities/75697

Check your stack JSON