Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2654
HistoryJul 08, 2010 - 12:54 p.m.

CVE-2010-2654

2010-07-0812:54:47
CWE-79
[email protected]
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.

Affected configurations

Nvd
Node
ibmadvanced_management_moduleRange≤2.48l
OR
ibmadvanced_management_moduleRange≤3.54g
OR
ibmadvanced_management_moduleMatch1.00
OR
ibmadvanced_management_moduleMatch1.01
OR
ibmadvanced_management_moduleMatch1.20
OR
ibmadvanced_management_moduleMatch1.20f
OR
ibmadvanced_management_moduleMatch1.25
OR
ibmadvanced_management_moduleMatch1.25e
OR
ibmadvanced_management_moduleMatch1.25i
OR
ibmadvanced_management_moduleMatch1.26b
OR
ibmadvanced_management_moduleMatch1.26e
OR
ibmadvanced_management_moduleMatch1.26h
OR
ibmadvanced_management_moduleMatch1.26i
OR
ibmadvanced_management_moduleMatch1.26k
OR
ibmadvanced_management_moduleMatch1.28g
OR
ibmadvanced_management_moduleMatch1.32d
OR
ibmadvanced_management_moduleMatch1.34b
OR
ibmadvanced_management_moduleMatch1.34e
OR
ibmadvanced_management_moduleMatch1.36d
OR
ibmadvanced_management_moduleMatch1.36g
OR
ibmadvanced_management_moduleMatch1.36h
OR
ibmadvanced_management_moduleMatch1.36k
OR
ibmadvanced_management_moduleMatch1.42d
OR
ibmadvanced_management_moduleMatch1.42f
OR
ibmadvanced_management_moduleMatch1.42i
OR
ibmadvanced_management_moduleMatch1.42n
OR
ibmadvanced_management_moduleMatch1.42o
OR
ibmadvanced_management_moduleMatch1.42t
OR
ibmadvanced_management_moduleMatch2.46c
OR
ibmadvanced_management_moduleMatch2.46j
OR
ibmadvanced_management_moduleMatch2.48c
OR
ibmadvanced_management_moduleMatch2.48d
OR
ibmadvanced_management_moduleMatch2.48g
OR
ibmadvanced_management_moduleMatch2.48n
OR
ibmadvanced_management_moduleMatch2.50c
OR
ibmadvanced_management_moduleMatch2.50g
OR
ibmadvanced_management_moduleMatch2.50k
OR
ibmadvanced_management_moduleMatch2.50p
OR
ibmadvanced_management_moduleMatch3.54d
AND
ibmbladecenter
VendorProductVersionCPE
ibmadvanced_management_module*cpe:2.3:h:ibm:advanced_management_module:*:l:*:*:*:*:*:*
ibmadvanced_management_module*cpe:2.3:h:ibm:advanced_management_module:*:g:*:*:*:*:*:*
ibmadvanced_management_module1.00cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:*
ibmadvanced_management_module1.01cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:*
ibmadvanced_management_module1.20cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:*
ibmadvanced_management_module1.20cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:*
ibmadvanced_management_module1.25cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:*
ibmadvanced_management_module1.25cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:*
ibmadvanced_management_module1.25cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:*
ibmadvanced_management_module1.26cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:*
Rows per page:
1-10 of 401

Related

prion 1
cvelist 1
cve 1
exploitdb 1
prion
prion
Cross site scripting
2010-07-08 12:54:00
cvelist
cvelist
CVE-2010-2654
2010-07-07 18:00:00
cve
cve
CVE-2010-2654
2010-07-08 12:54:47
exploitdb
exploitdb
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
2010-07-06 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON
Related for NVD:CVE-2010-2654
prion1cvelist1cve1exploitdb1