CVE-2010-2049: XSS
Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2049?
CVE-2010-2049 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2010-2049?
To mitigate CVE-2010-2049, ensure inputs to the reportList parameter in ExportReport.jsp are properly validated and sanitized.
What software is affected by CVE-2010-2049?
CVE-2010-2049 affects ManageEngine ADAudit Plus version 4.0.0.
Can CVE-2010-2049 be exploited remotely?
Yes, CVE-2010-2049 can be exploited remotely by injecting malicious scripts through the reportList parameter.
What kind of attack does CVE-2010-2049 facilitate?
CVE-2010-2049 facilitates cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.