CVE-2012-4982

CVE-2012-4982 describes an open redirect vulnerability in Forescout CounterACT NAC devices prior to version 7.0. This flaw, located in the assets/login component, allows remote attackers to redirect users to arbitrary websites by manipulating the 'a' parameter in a URL. With a CVSS score of 5.8 (medium severity), this vulnerability has a network attack vector and medium attack complexity, potentially leading to information disclosure and phishing attacks. Its FAUCET Risk Score is high at 95/100, despite a low EPSS score. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB and Nuclei templates. There is no evidence of active exploitation, and community discussion and media coverage for this CVE are minimal.