Unscored severity · published May 19, 2010
CVE-2010-1942
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Interstage Application Server · Fujitsu
3.0; 3.0; 4.0; 4.0; 4.0; 4.1; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1942
jvn.jp
http://jvn.jp/en/jp/JVN90248889/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html
osvdb.org
http://osvdb.org/64703
Vendor Advisory
http://secunia.com/advisories/39803
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html
Patch
http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html
More from Interstage Application Server
5.9
CVE-2019-13163
The Fujitsu TLS library allows a man-in-the-middle attack
–
CVE-2013-7105
Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio…
–
CVE-2008-7195
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of…
–
CVE-2008-7194
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of…
–
CVE-2007-5366
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain…