Cross-Site Scripting Vulnerability in Apache Axis2 Administration Console
CVE-2010-2103

Currently unrated

Key Information:

Vendor

Apache
Status
Axis2
Vendor
CVE Published:
27 May 2010

What is CVE-2010-2103?

An XSS vulnerability exists in the Apache Axis2 administration console, specifically within the axis2-admin module. This flaw permits remote attackers to exploit the modules parameter, leading to the injection of arbitrary web scripts or HTML. This issue affects Apache Axis2 in versions 1.4.1 and 1.5.1, and is likely present in other versions as well. Various third-party products utilizing the affected versions, such as SAP Business Objects and 3com IMC, are also at risk. Successful exploitation can result in unauthorized actions and compromise of user sessions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/58790
vdb-entryx_refsource_XF
http://secunia.com/advisories/39906
third-party-advisoryx_refsource_SECUNIA
http://www.exploit-db.com/exploits/12689
exploitx_refsource_EXPLOIT-DB

EPSS Score

21% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.