CVE-2015-10010

MEDIO 6.1CVE-2015-10010 · Published 02/01/2023 · updated 17/06/2026

En resumen

CVE-2015-10010 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a openresolve (cisco).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.61%, mayor que el 49.1% de las vulnerabilidades.
Solución: actualizar a 2015-08-03 o posterior.

Package	Affected versions	Patched versions
openresolve cisco	`< 2015-08-03`	`2015-08-03`

Description

A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The name of the patch is c680170d5583cd9342fe1af43001fe8b2b8004dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217196.

References

opendns/OpenResolve commit c680170 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Más vulnerabilidades de openresolve

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free