Vulnerability Database

296,760

Total vulnerabilities in the database

CVE-2012-2422

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.

Published: Apr 25, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-2422
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.9
AV:A/AC:M/Au:N/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
intuit / quickbooks	2012	2012.x
intuit / quickbooks	2010	2010.x
intuit / quickbooks	2009	2009.x
intuit / quickbooks	2011	2011.x

http://www.kb.cert.org/vuls/id/232979
http://www.securityfocus.com/archive/1/522139
https://exchange.xforce.ibmcloud.com/vulnerabilities/75173

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo