Unscored severity · published Jun 3, 2010
CVE-2010-2151
Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
E-pares · Fujitsu
l01; l03; l10; l20; l30; l40; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2151
jvn.jp
http://jvn.jp/en/jp/JVN82465391/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000022.html
Vendor Advisory
http://secunia.com/advisories/40029
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-36925871-58439007-82465391.html
www.securityfocus.com
http://www.securityfocus.com/bid/40517
More from E-pares
–
CVE-2010-2150
Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVE-2010-2149
Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors