Vulnerability Description
Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zeus | Zeus Web Server | <= 4.3r4 |
Related Weaknesses (CWE)
References
- http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
- http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
FAQ
What is CVE-2010-0363?
CVE-2010-0363 is a vulnerability with a CVSS score of 2.6 (LOW). Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vecto...
How severe is CVE-2010-0363?
CVE-2010-0363 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-0363?
Check the references section above for vendor advisories and patch information. Affected products include: Zeus Zeus Web Server.