MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc
Published Apr 9, 2010
4.3
MEDIUMCVSS 2.0
EPSS 1.53%
Description
Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (9)
- http://jvn.jp/en/jp/JVN38687002/index.html third-party-advisoryx_refsource_JVN
- http://jvn.jp/en/jp/JVN57963254/index.html third-party-advisoryx_refsource_JVN
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html third-party-advisoryx_refsource_JVNDB
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html third-party-advisoryx_refsource_JVNDB
- http://osvdb.org/63419 vdb-entryx_refsource_OSVDB
- http://secunia.com/advisories/39177 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.compiere-japan.com/products/release/patch.html x_refsource_CONFIRMPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57493 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57494 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| http://jvn.jp/en/jp/JVN38687002/index.html | third-party-advisoryx_refsource_JVN | |
| http://jvn.jp/en/jp/JVN57963254/index.html | third-party-advisoryx_refsource_JVN | |
| http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html | third-party-advisoryx_refsource_JVNDB | |
| http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html | third-party-advisoryx_refsource_JVNDB | |
| http://osvdb.org/63419 | vdb-entryx_refsource_OSVDB | |
| http://secunia.com/advisories/39177 | third-party-advisoryx_refsource_SECUNIAVendor Advisory | |
| http://www.compiere-japan.com/products/release/patch.html | x_refsource_CONFIRMPatchVendor Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/57493 | vdb-entryx_refsource_XF | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/57494 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 9, 2010
Updated Aug 7, 2024
Reserved Apr 9, 2010
Link CVE-2010-1333
CISA Vulnrichment
Updated n/a