What is CVE-2010-0363?

CVE-2010-0363 is a vulnerability in Zeus Web Server, classified under Cross-site Scripting. Published 2010-01-20.

Is CVE-2010-0363 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Zeus Web Server

CVE-2010-0363

Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.

Affected products

Zeus Zeus_web_server — versions 3.3, 3.4, 4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

UticaCollegeCyberSecurityClub/CCDC

References

cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2010-0363?: CVE-2010-0363 is a vulnerability in Zeus Web Server, classified under Cross-site Scripting. Published 2010-01-20.
Is CVE-2010-0363 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.