Unscored severity · published Nov 26, 2012
CVE-2010-5283
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Livelink Ecm · Opentext
9.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-5283
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-5283
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html
packetstormsecurity.org
http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt
Vendor Advisory
http://secunia.com/advisories/41553
www.osvdb.org
http://www.osvdb.org/68255
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/62057
More from Livelink Ecm
–
CVE-2010-5282
Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVE-2008-0769
Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web…