Security Advisory

CVE-2010-2087

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-05-27 18:32:00

Last updated 2024-09-17 01:02:09

Assigner mitre

State PUBLISHED

Description

Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.

← Browse all CVEs View on cve.org ↗