Vulnerability-Lookup

CVE-2010-0219 (GCVE-0-2010-0219)

Vulnerability from cvelistv5 – Published: 2010-10-18 16:00 – Updated: 2024-08-07 00:45

Previdian

Summary

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

Severity

No CVSS data available.

CWE

Assigner

certcc mitre root Scorecard

References

14 references

URL	Tags
http://secunia.com/advisories/41799	third-party-advisoryx_refsource_SECUNIA
https://kb.juniper.net/KB27373	x_refsource_CONFIRM
http://retrogod.altervista.org/9sg_ca_d2d.html	x_refsource_MISC
http://www.osvdb.org/70233	vdb-entryx_refsource_OSVDB
http://www.exploit-db.com/exploits/15869	exploitx_refsource_EXPLOIT-DB
http://spl0it.org/files/talks/source_barcelona10/…	x_refsource_MISC
http://www.vupen.com/english/advisories/2010/2673	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/514284/100…	mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/42763	third-party-advisoryx_refsource_SECUNIA
http://www.rapid7.com/security-center/advisories/…	x_refsource_MISC
http://www.kb.cert.org/vuls/id/989719	third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id?1024929	vdb-entryx_refsource_SECTRACK
https://service.sap.com/sap/support/notes/1432881	x_refsource_MISC

Date Public

2010-10-13 00:00

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 8efaea7a-5370-4135-aa21-1f8442836b63

Vulnerability ID: CVE-2010-0219

Status: Confirmed

Status Updated: 2025-04-23 02:00 CEST

Exploited: Yes

Timestamps

First Seen: 2025-04-23

Asserted: 2025-04-23

Scope

Notes: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of... | Affected: Apache / Axis2 | CVSS: 10.0 (HIGH) | EPSS: 0.90851 | Used in malware: unknown | Not yet in CISA KEV: True

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: previdian

Details

Feed	Previdian (previdian.com)
Title	Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of...
Cve Id	CVE-2010-0219
Vendor	Apache
Ghsa Id	None
Product	Axis2
Added Date	2025-04-23T00:00:00.000Z
Cvss Score	10.0
Epss Score	0.90851
Previous Ids
Cvss Severity	HIGH
Virtual Patch	False
Cvss Estimated	False
Epss Percentile	0.99804
Used In Malware	unknown
Vulnerability Id	CVE-2010-0219
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	True

References

Created: 2026-10-02 09:10 CEST | Updated: 2026-10-02 09:10 CEST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:45:10.633Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "41799",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41799"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/KB27373"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
          },
          {
            "name": "70233",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/70233"
          },
          {
            "name": "15869",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/15869"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
          },
          {
            "name": "ADV-2010-2673",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2673"
          },
          {
            "name": "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
          },
          {
            "name": "businessobjects-dswsbobje-security-bypass(62523)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
          },
          {
            "name": "42763",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42763"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
          },
          {
            "name": "VU#989719",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/989719"
          },
          {
            "name": "1024929",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024929"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://service.sap.com/sap/support/notes/1432881"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-10-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "41799",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41799"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/KB27373"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
        },
        {
          "name": "70233",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/70233"
        },
        {
          "name": "15869",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/15869"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
        },
        {
          "name": "ADV-2010-2673",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2673"
        },
        {
          "name": "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
        },
        {
          "name": "businessobjects-dswsbobje-security-bypass(62523)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
        },
        {
          "name": "42763",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42763"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
        },
        {
          "name": "VU#989719",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/989719"
        },
        {
          "name": "1024929",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024929"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://service.sap.com/sap/support/notes/1432881"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2010-0219",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "41799",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/41799"
            },
            {
              "name": "https://kb.juniper.net/KB27373",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/KB27373"
            },
            {
              "name": "http://retrogod.altervista.org/9sg_ca_d2d.html",
              "refsource": "MISC",
              "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
            },
            {
              "name": "70233",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/70233"
            },
            {
              "name": "15869",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/15869"
            },
            {
              "name": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf",
              "refsource": "MISC",
              "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
            },
            {
              "name": "ADV-2010-2673",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/2673"
            },
            {
              "name": "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
            },
            {
              "name": "businessobjects-dswsbobje-security-bypass(62523)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
            },
            {
              "name": "42763",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42763"
            },
            {
              "name": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp",
              "refsource": "MISC",
              "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
            },
            {
              "name": "VU#989719",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/989719"
            },
            {
              "name": "1024929",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024929"
            },
            {
              "name": "https://service.sap.com/sap/support/notes/1432881",
              "refsource": "MISC",
              "url": "https://service.sap.com/sap/support/notes/1432881"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2010-0219",
    "datePublished": "2010-10-18T16:00:00.000Z",
    "dateReserved": "2010-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T00:45:10.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2010-0219",
      "date": "2026-10-06",
      "epss": "0.90851",
      "percentile": "0.99804"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cret@cert.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F0CBFD09-884C-436D-8D92-88B47A130C47",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E0604FFE-16AC-4990-85F6-88C48A8E1707",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4D99CAA7-6580-4B1E-BDD7-0933F037B29D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EC2371DC-0E86-49F2-98F6-4CCE49A24183",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "38D8E446-7735-49C4-83E3-F1E6448ABD43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89046700-F2B9-4468-AB71-3451401C16DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:axis2:1.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FEC87179-CCFA-45D4-98C1-7D594EC88999",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*",
                    "matchCriteriaId": "224ED925-BF44-4C85-89B5-DC3A187AAE77",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
          },
          {
            "lang": "es",
            "value": "Axis2 de Apache, tal y como es usado en dswsbobje.war en SAP BusinessObjects Enterprise XI versi\u00f3n 3.2, CA ARCserve D2D r15 y otros productos, tiene una contrase\u00f1a por defecto de axis2 para la cuenta de administrador, lo que facilita a los atacantes remotos ejecutar c\u00f3digo arbitrario mediante la carga de un servicio web especialmente dise\u00f1ado."
          }
        ],
        "id": "CVE-2010-0219",
        "lastModified": "2026-06-16T23:15:44.017",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2010-10-18T17:00:03.457",
        "references": [
          {
            "source": "cret@cert.org",
            "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/41799"
          },
          {
            "source": "cret@cert.org",
            "url": "http://secunia.com/advisories/42763"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
          },
          {
            "source": "cret@cert.org",
            "url": "http://www.exploit-db.com/exploits/15869"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/989719"
          },
          {
            "source": "cret@cert.org",
            "url": "http://www.osvdb.org/70233"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
          },
          {
            "source": "cret@cert.org",
            "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
          },
          {
            "source": "cret@cert.org",
            "url": "http://www.securitytracker.com/id?1024929"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2673"
          },
          {
            "source": "cret@cert.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
          },
          {
            "source": "cret@cert.org",
            "url": "https://kb.juniper.net/KB27373"
          },
          {
            "source": "cret@cert.org",
            "tags": [
              "Patch"
            ],
            "url": "https://service.sap.com/sap/support/notes/1432881"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/41799"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/42763"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.exploit-db.com/exploits/15869"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/989719"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/70233"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1024929"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2673"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://kb.juniper.net/KB27373"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://service.sap.com/sap/support/notes/1432881"
          }
        ],
        "sourceIdentifier": "cret@cert.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-255"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2010-AVI-502

Vulnerability from certfr_avis - Published: 2010-10-18 - Updated: 2010-10-18

Une vulnérabilité dans SAP BusinessObjects permet à un utilisateur malveillant d'exécuter du code arbitraire à distance.

Description

SAP BusinessObjects contient un module, Axis2, dont le compte d'administration possède un mot de passe fixe dans sa configuration. En se connectant à un port sur lequel ce module écoute, un attaquant peut exécuter du code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur, non public, pour l'obtention des correctifs (cf. section Documentation).

SAP BusinessObjects.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

EUVD-2026-117475

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:31

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:31:49.632597+00:00",
  "id": "EUVD-2026-117475"
}

FKIE_CVE-2010-0219

Vulnerability from fkie_nvd - Published: 2010-10-18 17:00 - Updated: 2026-06-16 23:15

Previdian

Severity

Summary

References

URL	Tags
cret@cert.org	http://retrogod.altervista.org/9sg_ca_d2d.html
cret@cert.org	http://secunia.com/advisories/41799	Vendor Advisory
cret@cert.org	http://secunia.com/advisories/42763
cret@cert.org	http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf	Exploit
cret@cert.org	http://www.exploit-db.com/exploits/15869
cret@cert.org	http://www.kb.cert.org/vuls/id/989719	US Government Resource
cret@cert.org	http://www.osvdb.org/70233
cret@cert.org	http://www.rapid7.com/security-center/advisories/R7-0037.jsp	Exploit
cret@cert.org	http://www.securityfocus.com/archive/1/514284/100/0/threaded
cret@cert.org	http://www.securitytracker.com/id?1024929
cret@cert.org	http://www.vupen.com/english/advisories/2010/2673	Vendor Advisory
cret@cert.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
cret@cert.org	https://kb.juniper.net/KB27373
cret@cert.org	https://service.sap.com/sap/support/notes/1432881	Patch
af854a3a-2127-422b-91ae-364da2661108	http://retrogod.altervista.org/9sg_ca_d2d.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/41799	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/42763
af854a3a-2127-422b-91ae-364da2661108	http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.exploit-db.com/exploits/15869
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/989719	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/70233
af854a3a-2127-422b-91ae-364da2661108	http://www.rapid7.com/security-center/advisories/R7-0037.jsp	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/514284/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1024929
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2010/2673	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
af854a3a-2127-422b-91ae-364da2661108	https://kb.juniper.net/KB27373
af854a3a-2127-422b-91ae-364da2661108	https://service.sap.com/sap/support/notes/1432881	Patch

Impacted products

Vendor	Product	Version
apache	axis2	1.3
apache	axis2	1.4
apache	axis2	1.4.1
apache	axis2	1.5
apache	axis2	1.5.1
apache	axis2	1.5.2
apache	axis2	1.6
sap	businessobjects	3.2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cret@cert.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0CBFD09-884C-436D-8D92-88B47A130C47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0604FFE-16AC-4990-85F6-88C48A8E1707",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D99CAA7-6580-4B1E-BDD7-0933F037B29D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC2371DC-0E86-49F2-98F6-4CCE49A24183",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "38D8E446-7735-49C4-83E3-F1E6448ABD43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "89046700-F2B9-4468-AB71-3451401C16DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:axis2:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "FEC87179-CCFA-45D4-98C1-7D594EC88999",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*",
              "matchCriteriaId": "224ED925-BF44-4C85-89B5-DC3A187AAE77",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
    },
    {
      "lang": "es",
      "value": "Axis2 de Apache, tal y como es usado en dswsbobje.war en SAP BusinessObjects Enterprise XI versi\u00f3n 3.2, CA ARCserve D2D r15 y otros productos, tiene una contrase\u00f1a por defecto de axis2 para la cuenta de administrador, lo que facilita a los atacantes remotos ejecutar c\u00f3digo arbitrario mediante la carga de un servicio web especialmente dise\u00f1ado."
    }
  ],
  "id": "CVE-2010-0219",
  "lastModified": "2026-06-16T23:15:44.017",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-10-18T17:00:03.457",
  "references": [
    {
      "source": "cret@cert.org",
      "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/41799"
    },
    {
      "source": "cret@cert.org",
      "url": "http://secunia.com/advisories/42763"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.exploit-db.com/exploits/15869"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/989719"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.osvdb.org/70233"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securitytracker.com/id?1024929"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/2673"
    },
    {
      "source": "cret@cert.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
    },
    {
      "source": "cret@cert.org",
      "url": "https://kb.juniper.net/KB27373"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ],
      "url": "https://service.sap.com/sap/support/notes/1432881"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/41799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/42763"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.exploit-db.com/exploits/15869"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/989719"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/70233"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1024929"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/2673"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://kb.juniper.net/KB27373"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://service.sap.com/sap/support/notes/1432881"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-9X38-862G-JG8W

Vulnerability from github – Published: 2022-05-02 06:10 – Updated: 2022-05-02 06:10

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2010-0219"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2010-10-18T17:00:00Z",
    "severity": "HIGH"
  },
  "details": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.",
  "id": "GHSA-9x38-862g-jg8w",
  "modified": "2022-05-02T06:10:58Z",
  "published": "2022-05-02T06:10:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0219"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
    },
    {
      "type": "WEB",
      "url": "https://kb.juniper.net/KB27373"
    },
    {
      "type": "WEB",
      "url": "https://service.sap.com/sap/support/notes/1432881"
    },
    {
      "type": "WEB",
      "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/41799"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/42763"
    },
    {
      "type": "WEB",
      "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
    },
    {
      "type": "WEB",
      "url": "http://www.exploit-db.com/exploits/15869"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/989719"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/70233"
    },
    {
      "type": "WEB",
      "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1024929"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/2673"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2010-0219

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2010-0219

Aliases

CVE-2010-0219

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2010-0219",
    "description": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.",
    "id": "GSD-2010-0219",
    "references": [
      "https://packetstormsecurity.com/files/cve/CVE-2010-0219"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2010-0219"
      ],
      "details": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.",
      "id": "GSD-2010-0219",
      "modified": "2023-12-13T01:21:28.987174Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cert@cert.org",
        "ID": "CVE-2010-0219",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "41799",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/41799"
          },
          {
            "name": "https://kb.juniper.net/KB27373",
            "refsource": "CONFIRM",
            "url": "https://kb.juniper.net/KB27373"
          },
          {
            "name": "http://retrogod.altervista.org/9sg_ca_d2d.html",
            "refsource": "MISC",
            "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
          },
          {
            "name": "70233",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/70233"
          },
          {
            "name": "15869",
            "refsource": "EXPLOIT-DB",
            "url": "http://www.exploit-db.com/exploits/15869"
          },
          {
            "name": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf",
            "refsource": "MISC",
            "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
          },
          {
            "name": "ADV-2010-2673",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2010/2673"
          },
          {
            "name": "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
          },
          {
            "name": "businessobjects-dswsbobje-security-bypass(62523)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
          },
          {
            "name": "42763",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/42763"
          },
          {
            "name": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp",
            "refsource": "MISC",
            "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
          },
          {
            "name": "VU#989719",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/989719"
          },
          {
            "name": "1024929",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1024929"
          },
          {
            "name": "https://service.sap.com/sap/support/notes/1432881",
            "refsource": "MISC",
            "url": "https://service.sap.com/sap/support/notes/1432881"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.5.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.6:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.5:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.4.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2010-0219"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-255"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.rapid7.com/security-center/advisories/R7-0037.jsp"
            },
            {
              "name": "ADV-2010-2673",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2010/2673"
            },
            {
              "name": "https://service.sap.com/sap/support/notes/1432881",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "https://service.sap.com/sap/support/notes/1432881"
            },
            {
              "name": "41799",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/41799"
            },
            {
              "name": "VU#989719",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/989719"
            },
            {
              "name": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf"
            },
            {
              "name": "70233",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/70233"
            },
            {
              "name": "42763",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/42763"
            },
            {
              "name": "http://retrogod.altervista.org/9sg_ca_d2d.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://retrogod.altervista.org/9sg_ca_d2d.html"
            },
            {
              "name": "15869",
              "refsource": "EXPLOIT-DB",
              "tags": [],
              "url": "http://www.exploit-db.com/exploits/15869"
            },
            {
              "name": "1024929",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1024929"
            },
            {
              "name": "https://kb.juniper.net/KB27373",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://kb.juniper.net/KB27373"
            },
            {
              "name": "businessobjects-dswsbobje-security-bypass(62523)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523"
            },
            {
              "name": "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/514284/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-10T19:51Z",
      "publishedDate": "2010-10-18T17:00Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2010-0219 (GCVE-0-2010-0219)

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: previdian

Details

References

CERTA-2010-AVI-502

Description

Solution

EUVD-2026-117475

FKIE_CVE-2010-0219

GHSA-9X38-862G-JG8W

GSD-2010-0219

Tags

Sightings

Nomenclature

Related by attack behaviour