Lucene search

[email protected]CVE-2010-4641

HistoryDec 30, 2010 - 9:00 p.m.

CVE-2010-4641

2010-12-3021:00:06

CWE-89

[email protected]

web.nvd.nist.gov

cve-2010-4641

sql injection

xwiki enterprise

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

xwikixwikiRange≤2.4

xwikixwikiMatch0.9.543

xwikixwikiMatch0.9.790

xwikixwikiMatch0.9.793

xwikixwikiMatch0.9.840

xwikixwikiMatch0.9.1252

xwikixwikiMatch1.0b1

xwikixwikiMatch1.0b2

xwikixwikiMatch1.1rc1

CPENameOperatorVersion
xwiki:xwikixwikile2.4
xwiki:xwikixwikieq0.9.543
xwiki:xwikixwikieq0.9.790
xwiki:xwikixwikieq0.9.793
xwiki:xwikixwikieq0.9.840
xwiki:xwikixwikieq0.9.1252
xwiki:xwikixwikieq1.0
xwiki:xwikixwikieq1.1

CPE	Name	Operator	Version
xwiki:xwiki	xwiki	le	2.4
xwiki:xwiki	xwiki	eq	0.9.543
xwiki:xwiki	xwiki	eq	0.9.790
xwiki:xwiki	xwiki	eq	0.9.793
xwiki:xwiki	xwiki	eq	0.9.840
xwiki:xwiki	xwiki	eq	0.9.1252
xwiki:xwiki	xwiki	eq	1.0
xwiki:xwiki	xwiki	eq	1.1

References

secunia.com/advisories/42058

www.osvdb.org/68976

www.securityfocus.com/bid/44601

www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise25

exchange.xforce.ibmcloud.com/vulnerabilities/62943

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

Related for CVE-2010-4641

nvd1 prion1 cvelist1 openvas2