Lucene search

K
cvelistMitreCVELIST:CVE-2010-4007
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4007

2022-10-0316:21:06
mitre
www.cve.org
oracle mojarra
encrypted view state
vulnerability
padding oracle attack

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

Related for CVELIST:CVE-2010-4007