CVE-2010-2086 — MyFaces: XSS via state view

Back Back to CVE browser

MEDIUM

MyFaces: XSS via state view

Published May 27, 2010

4.0

MEDIUM

CVSS 2.0

EPSS 2.12%

Description

Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.

Affected products

JBEWS 1.0 for RHEL 4

glassfish-jsf-0:1.2_13-2.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

httpd22-0:2.2.14-4.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-commons-chain-0:1.2-2.1.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-commons-digester-0:1.8.1-7.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-commons-io-0:1.4-1.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-commons-modeler-0:2.0-3.3.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-commons-validator-0:1.3.1-7.4.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jakarta-oro-0:2.0.8-3jpp.ep1.3.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

jboss-javaee-0:5.0.1-2.3.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

mod_jk-0:1.2.28-4.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

struts12-0:1.2.9-2.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

tomcat-native-0:1.1.19-2.0.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

tomcat5-0:5.5.28-7.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

tomcat6-0:6.0.24-2.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

xerces-j2-0:2.9.1-2.2_patch_01.ep5.el4

Fixed · RHSA-2010:0119
JBEWS 1.0 for RHEL 4

xml-commons-resolver12-1:1.2-1.1.ep5.el4

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

glassfish-jsf-0:1.2_13-3.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

httpd-0:2.2.14-1.2.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

jakarta-commons-chain-0:1.2-2.1.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

jakarta-commons-io-0:1.4-1.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

jakarta-oro-0:2.0.8-3.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

mod_jk-0:1.2.28-4.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

struts12-0:1.2.9-2.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

tomcat-native-0:1.1.19-2.0.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

tomcat5-0:5.5.28-7.1.ep5.el5

Fixed · RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5

tomcat6-0:6.0.24-2.1.ep5.el5

Fixed · RHSA-2010:0119

Product	Package	State	Advisory
JBEWS 1.0 for RHEL 4	glassfish-jsf-0:1.2_13-2.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	httpd22-0:2.2.14-4.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-commons-chain-0:1.2-2.1.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-commons-digester-0:1.8.1-7.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-commons-io-0:1.4-1.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-commons-modeler-0:2.0-3.3.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-commons-validator-0:1.3.1-7.4.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jakarta-oro-0:2.0.8-3jpp.ep1.3.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	jboss-javaee-0:5.0.1-2.3.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	mod_jk-0:1.2.28-4.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	struts12-0:1.2.9-2.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	tomcat-native-0:1.1.19-2.0.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	tomcat5-0:5.5.28-7.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	tomcat6-0:6.0.24-2.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	xerces-j2-0:2.9.1-2.2_patch_01.ep5.el4	Fixed	RHSA-2010:0119
JBEWS 1.0 for RHEL 4	xml-commons-resolver12-1:1.2-1.1.ep5.el4	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	glassfish-jsf-0:1.2_13-3.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	httpd-0:2.2.14-1.2.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	jakarta-commons-chain-0:1.2-2.1.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	jakarta-commons-io-0:1.4-1.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	jakarta-oro-0:2.0.8-3.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	mod_jk-0:1.2.28-4.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	struts12-0:1.2.9-2.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	tomcat-native-0:1.1.19-2.0.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	tomcat5-0:5.5.28-7.1.ep5.el5	Fixed	RHSA-2010:0119
Red Hat JBoss Enterprise Web Server 1 for RHEL 5	tomcat6-0:6.0.24-2.1.ep5.el5	Fixed	RHSA-2010:0119

Remediation

No remediation recorded yet.

Metrics

2.12% 0.02118

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02118

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.12% (0.02118)	81.18th	v5 (v2026.06.15)
Jun 15, 2026	2.12% (0.02118)	79.39th	v5 (v2026.06.15)
Oct 28, 2025	2.95% (0.02948)	85.93th	v4 (v2025.03.14)
Mar 17, 2025	1.30% (0.01299)	78.33th	v4 (v2025.03.14)
Dec 12, 2024	1.85% (0.01852)	88.83th	v3 (v2023.03.01)
Apr 25, 2024	2.42% (0.02417)	89.79th	v3 (v2023.03.01)
Mar 15, 2024	3.11% (0.03107)	90.81th	v3 (v2023.03.01)
Feb 17, 2024	2.24% (0.02239)	89.21th	v3 (v2023.03.01)
Feb 8, 2024	2.21% (0.02215)	89.11th	v3 (v2023.03.01)
Mar 7, 2023	1.85% (0.01852)	86.46th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Sep 17, 2022	1.05% (0.01055)	50.47th	v2 (v2022.01.01)
Apr 1, 2022	1.05% (0.01055)	48.43th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2010-2086
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=598164
Issue Tracking
https://github.com/advisories/GHSA-92cv-wv2c-8899
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-2086
https://www.cve.org/CVERecord?id=CVE-2010-2086
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt
x_refsource_MISC

Link	Providers	Tags
http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf		x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2010-2086		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=598164		Issue Tracking
https://github.com/advisories/GHSA-92cv-wv2c-8899		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-2086
https://www.cve.org/CVERecord?id=CVE-2010-2086
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt		x_refsource_MISC