CVE-2010-2103

2010-05-2700:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

Cross-site scripting (XSS) vulnerability in
axis2-admin/axis2-admin/engagingglobally in the administration console in
Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP
Business Objects 12, 3com IMC, and possibly other products, allows remote
attackers to inject arbitrary web script or HTML via the modules parameter.
NOTE: some of these details are obtained from third party information.