Lucene search

K
cveMitreCVE-2010-3981
HistoryOct 18, 2010 - 5:00 p.m.

CVE-2010-3981

2010-10-1817:00:04
CWE-79
mitre
web.nvd.nist.gov
29
sap
businessobjects
xi 3.2
xss
vulnerability
serviceclass
web script
html
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

58.8%

Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.

Affected configurations

Nvd
Node
sapbusinessobjectsMatch3.2enterprise_xi
VendorProductVersionCPE
sapbusinessobjects3.2cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

58.8%

Related for CVE-2010-3981