CVE-2010-2151

EPSS 0.12%
Veröffentlicht 03.06.2010 16:30:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fujitsu ≫ E-pares Versionl01

Fujitsu ≫ E-pares Versionl03

Fujitsu ≫ E-pares Versionl10

Fujitsu ≫ E-pares Versionl20

Fujitsu ≫ E-pares Versionl30

Fujitsu ≫ E-pares Versionl40

Fujitsu ≫ E-pares Versionv01

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.276

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.6	4.9	2.9	AV:N/AC:H/Au:N/C:N/I:P/A:N

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://secunia.com/advisories/40029

Vendor Advisory

http://software.fujitsu.com/jp/security/vulnerabilities/jvn-36925871-58439007-82465391.html

Vendor Advisory

http://jvn.jp/en/jp/JVN82465391/index.html

http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000022.html

http://www.securityfocus.com/bid/40517

https://nvd.nist.gov/vuln/detail/CVE-2010-2151

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2151

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2151

EUVD