PT-2010-2392 · Ca · Ca Ehealth Performance Manager

Publicado 2010-02-24 · Atualizado 2018-10-10 · CVE-2010-0640

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA eHealth Performance Manager versions 6.0.x through 6.2.x

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted request when malicious HTML detection is disabled.

Recommendations For CA eHealth Performance Manager versions 6.0.x through 6.2.x, enable malicious HTML detection to prevent exploitation of this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-0640

Produtos afetados

Ca Ehealth Performance Manager

Referências · 4

• http://seclists.org/fulldisclosure/2010/Feb/415 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0640 · Nota de Segurança
• http://securityfocus.com/archive/1/509714/100/0/threaded · Nota
• http://securityfocus.com/bid/38376 · Nota