{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-01-12T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2010-0104", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/0104"}, {"name": "37765", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/37765"}, {"name": "61655", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/61655"}, {"name": "zope-standarderrormessage-xss(55599)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55599"}, {"name": "[zope-announce] 20100112 New Zope2 releases available", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html"}, {"name": "38007", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/38007"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-1104", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2010-0104", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/0104"}, {"name": "37765", "refsource": "BID", "url": "http://www.securityfocus.com/bid/37765"}, {"name": "61655", "refsource": "OSVDB", "url": "http://www.osvdb.org/61655"}, {"name": "zope-standarderrormessage-xss(55599)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55599"}, {"name": "[zope-announce] 20100112 New Zope2 releases available", "refsource": "MLIST", "url": "https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html"}, {"name": "38007", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38007"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T01:14:06.107Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2010-0104", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/0104"}, {"name": "37765", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/37765"}, {"name": "61655", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/61655"}, {"name": "zope-standarderrormessage-xss(55599)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55599"}, {"name": "[zope-announce] 20100112 New Zope2 releases available", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html"}, {"name": "38007", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/38007"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-1104", "datePublished": "2010-03-25T17:00:00", "dateReserved": "2010-03-25T00:00:00", "dateUpdated": "2024-08-07T01:14:06.107Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zope:zope:2.8:*:*:*:*:*:*:*", "matchCriteriaId": "8CBE7CB7-45A5-4FDA-A677-912301149C2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "234C776B-C053-484C-ADE4-ED270064943F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0-a1:*:*:*:*:*:*:*", "matchCriteriaId": "4119535A-9B8C-45F2-B083-E6ABB3E08393", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0-a2:*:*:*:*:*:*:*", "matchCriteriaId": "7ADFE72D-9A97-4A76-A811-024DF90AD86A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0-b1:*:*:*:*:*:*:*", "matchCriteriaId": "6C5B98B5-A2D7-4A71-AF16-7A57AA271252", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0-b2:*:*:*:*:*:*:*", "matchCriteriaId": "0B31785F-2DF7-4836-9933-7401F3303D0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.0-final:*:*:*:*:*:*:*", "matchCriteriaId": "E3A443D6-6079-4F15-83CC-78637A4CFF72", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "244107E5-42B0-4695-BBC9-5B90AD0A1336", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.1-b1:*:*:*:*:*:*:*", "matchCriteriaId": "94F1CF87-3A0E-437C-B8B9-92518D82092D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.1-final:*:*:*:*:*:*:*", "matchCriteriaId": "BE1A6CB8-661E-4BBB-846E-43A537CA4A67", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "93785E75-3F82-471E-B802-6337A6469AF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "B34066B4-CE72-4271-9CFD-F725F7D17C89", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "9A40B0D1-1812-4BC7-AC7D-CCE6184A9DB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "81028DBB-7A75-4D27-8027-947F15CAA21E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "62BCE60F-9081-44D3-87FC-396D1A954626", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "DBA09D22-779C-4E63-B216-B931FA11E014", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "B2759CCE-3A1F-4E3F-9832-8BF3AA4F20F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.9:*:*:*:*:*:*:*", "matchCriteriaId": "B6EBDE5C-4529-4BA2-81A2-A87F65462608", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "25D8B724-8D66-4025-9374-982416282500", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.10:*:*:*:*:*:*:*", "matchCriteriaId": "9F87953F-C2F1-4284-819D-BA4BD74008C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.8.11:*:*:*:*:*:*:*", "matchCriteriaId": "9CE4A276-F143-40CD-AEB5-584688D3F910", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "1EC9CB4D-3DE0-425B-9897-03C23379B5F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.0-b1:*:*:*:*:*:*:*", "matchCriteriaId": "E3643AA3-4997-4E12-9652-4DBC55D2FA27", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.0-b2:*:*:*:*:*:*:*", "matchCriteriaId": "A85A6886-D27B-48A1-9749-7CA301B579DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "82D9A178-BF69-4C23-BEC8-D175FD58E10D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "C0279FD6-9E30-429A-BB70-9B7AF7055160", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "78E8ABCF-A7BE-4AB7-BFE9-CF29F7E02860", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "6561FF26-91C5-40AF-8AA6-E98D295AC33F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "DAF323F8-6F93-46CB-A94C-B0774C54188F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "0EF07C5D-DE44-409F-87B6-FB713BAF2547", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.7:*:*:*:*:*:*:*", "matchCriteriaId": "AACD00C8-F451-4B27-855F-57B6F38A28E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "457D78E5-46CF-45CA-88E8-ED2A1502BB1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.9:*:*:*:*:*:*:*", "matchCriteriaId": "28791A2A-31DC-455C-8775-44E6FE0EF511", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.10:*:*:*:*:*:*:*", "matchCriteriaId": "88B232C7-746E-4F2D-8886-B872C307E5DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.9.11:*:*:*:*:*:*:*", "matchCriteriaId": "291208DB-FB12-4361-B3F6-B9A34FFB074D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-b1:*:*:*:*:*:*:*", "matchCriteriaId": "A41D4E4B-EFEF-46E8-99E5-BA1B691F0673", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-b2:*:*:*:*:*:*:*", "matchCriteriaId": "7B1685B1-4E40-4341-A4FD-54409EF5160A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-c1:*:*:*:*:*:*:*", "matchCriteriaId": "7490F597-C4C5-4CF1-8090-08FB3B1A8ECE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-final:*:*:*:*:*:*:*", "matchCriteriaId": "43997ED2-9214-42D9-8404-23BC5B79139E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "364BF6B5-3C83-41D3-A934-40BD0C4D05ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2-b1:*:*:*:*:*:*:*", "matchCriteriaId": "AE608607-2800-4B9F-814B-3E339E2F86A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2-final:*:*:*:*:*:*:*", "matchCriteriaId": "EB02DAA0-3E51-4419-82FB-1DAF9C8105B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.3:*:*:*:*:*:*:*", "matchCriteriaId": "0A85B5F4-C731-45F7-801F-8399B06EE135", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.3-final:*:*:*:*:*:*:*", "matchCriteriaId": "B6819AA8-E777-4C9A-9950-AD1F34C89B1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.4-final:*:*:*:*:*:*:*", "matchCriteriaId": "F69CE0DC-A1C8-4E88-BA6E-3A152697D36F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.5:*:*:*:*:*:*:*", "matchCriteriaId": "02F52B0A-A6F9-4357-9E54-69794FE6568E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.6:*:*:*:*:*:*:*", "matchCriteriaId": "B80D8374-50AD-4710-9B6E-C31B67B98C97", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.7:*:*:*:*:*:*:*", "matchCriteriaId": "5B85BDEE-B9B3-45E5-B1FC-F639B2351E1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.8:*:*:*:*:*:*:*", "matchCriteriaId": "52629E94-50DC-4F00-8F96-217F4F2B82B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.9:*:*:*:*:*:*:*", "matchCriteriaId": "CB5C2E63-04C5-4F91-8649-0C7F0E9B4D63", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.10:*:*:*:*:*:*:*", "matchCriteriaId": "D2758FAA-DA98-468D-A116-EA2F89F6EBFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.10.11:*:*:*:*:*:*:*", "matchCriteriaId": "8B4322F9-96DC-4907-A091-DC63B02DCEB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "92CC66BD-4B63-4CA5-9F4E-A5F1FC6A86DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0a1:*:*:*:*:*:*:*", "matchCriteriaId": "609A682A-9233-40FE-BF48-EB8645A98182", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0b1:*:*:*:*:*:*:*", "matchCriteriaId": "8816B911-9FA2-41C9-BAF4-4ED902EAB518", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0c1:*:*:*:*:*:*:*", "matchCriteriaId": "BF76AB3F-8AC4-4176-9126-48E929911C6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "68155E38-F337-42CE-AE30-9482EBED8EA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.2:*:*:*:*:*:*:*", "matchCriteriaId": "E7994032-FEBB-4FD3-9808-A7B277CAD8A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.3:*:*:*:*:*:*:*", "matchCriteriaId": "C675DA8E-D981-4CFE-8EF7-04FD187DC5CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.4:*:*:*:*:*:*:*", "matchCriteriaId": "B740CAB6-4459-4934-9731-954BF6DAC019", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.11.5:*:*:*:*:*:*:*", "matchCriteriaId": "9A8AEA03-622E-415C-972B-5733110B6396", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "2704CA8B-2AB3-48C7-85DC-66F9AD667E0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.12.1:*:*:*:*:*:*:*", "matchCriteriaId": "DB0F8805-2E74-40F6-BAE1-DB8187043611", "vulnerable": true}, {"criteria": "cpe:2.3:a:zope:zope:2.12.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD3A0116-BDE0-490A-8CE6-0B4B0E003887", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados en Zope v2.8.x antes de v2.8.12, v2.9.x antes de v2.9.12, v2.10.x antes de v2.10.11, v2.11.x antes de v2.11.6 y v2.12.x antes de v2.12.3 permite a atacantes remotos inyectar HTML o scripts web a trav\u00e9s de vectores relacionados con los mensajes de error."}], "id": "CVE-2010-1104", "lastModified": "2017-08-17T01:32:14.930", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-03-25T17:30:00.390", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/38007"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/61655"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/37765"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/0104"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55599"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2010-1104\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.", "lastModified": "2010-04-21T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2012:0151", "cpe": "cpe:/a:redhat:rhel_cluster:5", "package": "conga-0:0.12.2-51.el5", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2012-02-21T00:00:00Z"}], "bugzilla": {"description": "zope: XSS on error page", "id": "577019", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=577019"}, "csaw": false, "cvss": {"cvss_base_score": "4.3", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "status": "verified"}, "cwe": "CWE-79", "details": ["Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."], "name": "CVE-2010-1104", "package_state": [{"cpe": "cpe:/a:redhat:rhel_cluster:4", "fix_state": "Will not fix", "package_name": "conga", "product_name": "Red Hat Cluster Suite 4AS"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Affected", "package_name": "conga", "product_name": "Red Hat Enterprise Linux 5"}], "public_date": "2010-01-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2010-1104\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-1104"], "threat_severity": "Moderate"}