{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:12:42Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20120620-CVE-2012-2495","slug":"cisco-sa-20120620-cve-2012-2495","vendor":"Cisco","title":"Cisco AnyConnect Secure Mobility Client and Secure Desktop WebLaunch Software Downgrade Vulnerability","summary":"Cisco AnyConnect Secure Mobility Client and Secure Desktop contain a vulnerability that could allow an unauthenticated, remote attacker to replace software components on a targeted system. The vulnerability exists because the affected software performs insufficient validation of user-supplied input. An unauthenticated, remote attacker could exploit the vulnerability by convincing the user to view a malicious website. If successful, the attacker could cause the affected software to be downgraded to a prior version. Cisco has confirmed the vulnerability in a security advisory and released software updates. To exploit the vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link. The execution of the ActiveX control of java applet may require little or no user interaction, depending on the user's browser configuration, because the affected ActiveX controls and Java applets are cryptographically signed by Cisco. Cisco has corrected this vulnerability by changing the way the WebLaunch component initiation handles downloaded signed code. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2012-06-20T17:19:07Z","updated_at":"2012-06-20T17:19:07Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120620-CVE-2012-2495","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20120620-CVE-2012-2495/csaf/Cisco-SA-20120620-CVE-2012-2495.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":2,"public_evidence_count":2,"kev_count":0,"highest_epss":0.01401},"cves":[{"id":"CVE-2012-2495","kev":false,"epss":{"score":0.01401,"percentile":0.69479,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco AnyConnect Secure Mobility Client","slug":"cisco-anyconnect-secure-mobility-client","vendor":"Cisco"},"cve":{"id":"CVE-2012-2495"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco AnyConnect Secure Mobility Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01401,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-06-20T17:19:07Z","updated_at":"2012-06-20T17:19:07Z","advisory_updated_at":"2012-06-20T17:19:07Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120620-CVE-2012-2495","row_display_order":1},{"product":{"name":"Cisco Secure Desktop","slug":"cisco-secure-desktop","vendor":"Cisco"},"cve":{"id":"CVE-2012-2495"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Desktop","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01401,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-06-20T17:19:07Z","updated_at":"2012-06-20T17:19:07Z","advisory_updated_at":"2012-06-20T17:19:07Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120620-CVE-2012-2495","row_display_order":2}]}