$ cve CVE-2010-2103 JSON

CVE-2010-2103 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 34.9% (pctl 98)

Patch early

A public exploit exists.

Description

Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	34.93% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2010-05-27
Last modified	2026-06-16

Affected (3)

Vendor	Product
3com	intelligent management center
apache	axis2
sap	business objects

Public exploits

Source	Title	Date
exploit-db	Apache Axis2 Administration Console - (Authenticated) Cross-Site Scripting	2010-05-21

References

→ the Explorer · watch your stack · NVD