← volver
CVE-2010-2103

CVE-2010-2103

EPSS 34.9%
Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/12689no verificadoexploitdbwww.exploit-db.com/exploits/12689no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://osvdb.org/64844http://secunia.com/advisories/39906https://exchange.xforce.ibmcloud.com/vulnerabilities/58790https://kb.juniper.net/KB27373http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdfhttp://www.exploit-db.com/exploits/12689http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-03http://www.securityfocus.com/archive/1/511404/100/0/threadedhttp://www.securityfocus.com/bid/40327http://www.vupen.com/english/advisories/2010/1215