Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2010-2091

EPSS 4.46% · P89
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-2091

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Outlook Web Access跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Outlook Web Access (OWA)是企业网络中广泛部署的邮件客户端。 Microsoft Outlook Web Access (OWA)存在漏洞,当Internet Explorer 7在Windows Server 2003上使用时,无法正确处理默认URI Folder IPF.Note操作的id参数,远程攻击者可通过无效值获取敏感信息或发起跨站脚本攻击(XSS)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2010-2091

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-2091

登录查看更多情报信息。

Same Patch Batch · n/a · 2010-05-27 · 34 CVEs total

CVE-2010-2089Python audioop模块远程拒绝服务漏洞
CVE-2010-0598Cisco Network Building Mediator HTTP会话访问管理员验证凭据泄露漏洞
CVE-2010-0599Cisco Network Building Mediator XML RPC会话访问管理员验证凭据泄露漏洞
CVE-2010-0600Cisco Network Building Mediator系统配置文件信息泄露漏洞
CVE-2010-1296Adobe Photoshop多个文件类型处理缓冲区溢出漏洞
CVE-2010-1449Python 输入验证错误漏洞
CVE-2010-1450Python rgbimg RLE解码器多个缓冲区错误漏洞
CVE-2010-1634Python 输入验证错误漏洞
CVE-2010-1959HP TestDirector for Quality Center未明漏洞
CVE-2010-0597Cisco Network Building Mediator XML RPC通讯远程信息泄露漏洞
CVE-2010-2090IBM Communications Server for AIX远程拒绝服务漏洞
CVE-2010-1459Mono 'EnableViewStateMac'跨站脚本攻击漏洞
CVE-2010-2084Microsoft ASP.NET InnerHtml属性跨站脚本攻击漏洞
CVE-2010-2085Microsoft ASP.NET EnableViewStateMac属性跨站脚本攻击漏洞
CVE-2010-2086IBM WebSphere Application Server 跨站脚本攻击漏洞
CVE-2010-2087IBM WebSphere Application Server 跨站脚本攻击漏洞
CVE-2010-2088Microsoft .NET ASP.NET view state跨站脚本攻击漏洞
CVE-2010-2092Cacti 'graph.php' SQL注入漏洞
CVE-2010-0596Cisco Network Building Mediator HTTP通讯远程信息泄露漏洞
CVE-2010-0595Cisco Network Building Mediator 默认凭证认证管理绕过漏洞

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2010-2091

No comments yet


Leave a comment