Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2010-1971

EPSS 0.10% · P27
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-1971

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HP Insight Software Installer跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HP Insight Control是HP发行的一款综合系统管理解决方案。 基于Windows6.1之前平台的HP Insight Software Installer存在跨站请求伪造(CSRF)漏洞。应用程序没有对请求进行正确的合法校验,攻击者可以通过构建恶意HTTP请求,诱使用户访问来执行某些管理操作。成功利用漏洞可以未授权访问应用系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2010-1971

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-1971

登录查看更多情报信息。

Same Patch Batch · n/a · 2010-07-14 · 9 CVEs total

CVE-2010-0266Microsoft Outlook SMB附件验证漏洞
CVE-2010-0814Microsoft Office Access ActiveX控件远程代码执行漏洞
CVE-2010-1881Microsoft Access FieldList ActiveX控件实例化内存破坏漏洞
CVE-2010-1965HP Insight Orchestration未明安全绕过漏洞
CVE-2010-1966HP Insight Control Power Management未明敏感信息泄露漏洞
CVE-2010-1967HP Insight Software Installer未明错误敏感信息泄露漏洞
CVE-2010-1968HP Insight Software Installer恶意URI跨站请求伪造漏洞
CVE-2010-1970HP Insight Software Installer未明特权提升漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2010-1971

No comments yet


Leave a comment