Lucene search
HistoryMay 27, 2010 - 7:00 p.m.
CVE-2010-2084
cve-2010-2084
microsoft asp.net
xss
innerhtml property
cross-site scripting
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.03 Low
EPSS
Percentile
90.8%
Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:asp.net | microsoft asp.net | eq | 2.0 |
Related
prion
prion
Cross site scripting
2010-05-27 19:00:00
seebug
seebug
Microsoft ASP.NET 2.0 InnerHtml属性远程跨站脚本漏洞
2010-05-31 00:00:00
openvas
openvas
Microsoft ASP.NET Cross-Site Scripting vulnerability
2010-06-09 00:00:00
Microsoft ASP.NET Cross-Site Scripting vulnerability
2010-06-09 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.03 Low
EPSS
Percentile
90.8%
Related for CVE-2010-2084