Lucene search
+L

CVE-2010-2656

🗓️ 07 Jul 2010 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 73 Views🌐 WEB

IBM BladeCenter AMM firmware before 4.7, 5.0 allows unauthorized access to sensitive info

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2010-2656
6 Jul 201000:00
–circl
cvelist
Cvelist
CVE-2010-2656
7 Jul 201018:00
–cvelist
exploitdb
Exploit DB
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
6 Jul 201000:00
–exploitdb
nvd
NVD
CVE-2010-2656
8 Jul 201012:54
–nvd
prion
Prion
Improper access control
8 Jul 201012:54
–prion
rapid7
Rapid7 Vulnerability Database (full)
CVE-2010-2656: Undefined Security Weakness
7 Jul 201000:00
–rapid7
ParameterPositionPathDescriptionCWE
INDEXquery param/private/cindefn.php?INDEX=3%3C/NOBR%3E%20%3Cscript%3Ealert(%27XSS1%27);%3C/script%3E&VLANID=&IPADDR=3%3E%3Cscript%3Ealert(%27XSS2%27);%3C/script%3EXSS vulnerability in BladeCenter AMM web interface via crafted inputs in INDEX/IPADDR parameters.CWE-264
IPADDRquery param/private/cindefn.php?INDEX=3%3C/NOBR%3E%20%3Cscript%3Ealert(%27XSS1%27);%3C/script%3E&VLANID=&IPADDR=3%3E%3Cscript%3Ealert(%27XSS2%27);%3C/script%3EXSS vulnerability in BladeCenter AMM web interface via crafted inputs in INDEX/IPADDR parameters.CWE-264
domainquery param/private/power_management_policy_options.php?domain=3%3CXSS%3EXSS vulnerability via domain parameter in power_management_policy_options.CWE-264
viewquery param/private/pm_temp.php?view=6&mod_type=3&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in pm_temp endpoint.CWE-264
mod_typequery param/private/pm_temp.php?view=6&mod_type=3&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in pm_temp endpoint.CWE-264
slotquery param/private/pm_temp.php?view=6&mod_type=3&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in pm_temp endpoint.CWE-264
viewquery param/private/power_module.php?view=4&mod_type=4&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in power_module.CWE-264
mod_typequery param/private/power_module.php?view=4&mod_type=4&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in power_module.CWE-264
slotquery param/private/power_module.php?view=4&mod_type=4&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in power_module.CWE-264
viewquery param/private/pm_temp.php?view=6&mod_type=3&slot=3%3CXSS%3EXSS vulnerability via view/mod_type/slot parameters in pm_temp.CWE-264
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:21Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.02456
73