Lucene search

[email protected]CVE-2010-2654

HistoryJul 08, 2010 - 12:54 p.m.

CVE-2010-2654

2010-07-0812:54:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-2654

ibm bladecenter

xss

vulnerabilities

amm firmware

web script

html

remote attackers

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.

CPENameOperatorVersion
ibm:advanced_management_moduleibm advanced management modulele2.48
ibm:advanced_management_moduleibm advanced management modulele3.54
ibm:advanced_management_moduleibm advanced management moduleeq1.00
ibm:advanced_management_moduleibm advanced management moduleeq1.01
ibm:advanced_management_moduleibm advanced management moduleeq1.20
ibm:advanced_management_moduleibm advanced management moduleeq1.25
ibm:advanced_management_moduleibm advanced management moduleeq1.26
ibm:advanced_management_moduleibm advanced management moduleeq1.28
ibm:advanced_management_moduleibm advanced management moduleeq1.32
ibm:advanced_management_moduleibm advanced management moduleeq1.34

CPE	Name	Operator	Version
ibm:advanced_management_module	ibm advanced management module	le	2.48
ibm:advanced_management_module	ibm advanced management module	le	3.54
ibm:advanced_management_module	ibm advanced management module	eq	1.00
ibm:advanced_management_module	ibm advanced management module	eq	1.01
ibm:advanced_management_module	ibm advanced management module	eq	1.20
ibm:advanced_management_module	ibm advanced management module	eq	1.25
ibm:advanced_management_module	ibm advanced management module	eq	1.26
ibm:advanced_management_module	ibm advanced management module	eq	1.28
ibm:advanced_management_module	ibm advanced management module	eq	1.32
ibm:advanced_management_module	ibm advanced management module	eq	1.34

Rows per page:

1-10 of 141

References

dsecrg.com/pages/vul/show.php?id=154

osvdb.org/66122

osvdb.org/66125

osvdb.org/66126

osvdb.org/66127

osvdb.org/66128

osvdb.org/66129

osvdb.org/66130

www.exploit-db.com/exploits/14237/

www.securityfocus.com/bid/41383

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.5%

JSON

Related for CVE-2010-2654

cvelist1 prion1