Lucene search

MitreCVE-2010-5282

HistoryNov 26, 2012 - 11:55 p.m.

CVE-2010-5282

2012-11-2623:55:00

CWE-79

mitre

web.nvd.nist.gov

cve-2010-5282

cross-site scripting

xss

opentext ecm

livelink ecm

nvd

vulnerabilities

web script

html

remote attackers

injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.

Affected configurations

Nvd

Node

opentextlivelink_ecmMatch9.7.1

VendorProductVersionCPE
opentextlivelink_ecm9.7.1cpe:2.3:a:opentext:livelink_ecm:9.7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opentext	livelink_ecm	9.7.1	cpe:2.3:a:opentext:livelink_ecm:9.7.1:::::::*

References

archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html

packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt

secunia.com/advisories/41553

www.osvdb.org/68256

www.osvdb.org/68257

exchange.xforce.ibmcloud.com/vulnerabilities/62056

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.0%

JSON

Related for CVE-2010-5282