Lucene search

MitreCVE-2010-1242

HistoryApr 05, 2010 - 3:30 p.m.

CVE-2010-1242

2010-04-0515:30:01

CWE-79

mitre

web.nvd.nist.gov

ibm

web interface

content management

xss

vulnerabilities

nvd

cve-2010-1242

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

ibmwebiRange≤1.0.3

ibmwebiMatch1.0.2

VendorProductVersionCPE
ibmwebi*cpe:2.3:a:ibm:webi:*:*:*:*:*:*:*:*
ibmwebi1.0.2cpe:2.3:a:ibm:webi:1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	webi	*	cpe:2.3:a:ibm:webi::::::::
ibm	webi	1.0.2	cpe:2.3:a:ibm:webi:1.0.2:::::::*

References

secunia.com/advisories/39186

www-01.ibm.com/support/docview.wss?uid=swg24025662

www-1.ibm.com/support/docview.wss?uid=swg1IO11274

www.vupen.com/english/advisories/2010/0733

www.vupen.com/english/advisories/2011/0834

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

Related for CVE-2010-1242