Lucene search

K
nvd[email protected]NVD:CVE-2010-3981
HistoryOct 18, 2010 - 5:00 p.m.

CVE-2010-3981

2010-10-1817:00:04
CWE-79
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.8%

Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.

Affected configurations

Nvd
Node
sapbusinessobjectsMatch3.2enterprise_xi
VendorProductVersionCPE
sapbusinessobjects3.2cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.8%

Related for NVD:CVE-2010-3981