CVE-2010-2103

Currently unrated

Key Information:

Vendor
Apache
Status
Axis2
Vendor
CVE Published:
27 May 2010

Summary

Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/58790
vdb-entryx_refsource_XF
http://secunia.com/advisories/39906
third-party-advisoryx_refsource_SECUNIA
http://www.exploit-db.com/exploits/12689
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.