Improper input validation in Ca Psformx Active X Control
CVE-2010-2193
Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.059 (92.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.059 · newest: 0.059 · change: 0.000
Affected products
- Ca Psformx Active X Control — versions 56393399-041a-4650-94c7-13dfcb1f4665
- Ca Webscan Active X Control — versions 7b297bfd-85e4-4092-b2af-16a91b2ea103
Weakness classification (CWE)
References
- www.securityfocus.com/bid/40689 (vdb-entry)
- osvdb.org/65382 (vdb-entry)
- www.securityfocus.com/archive/1/511764/100/0/threaded (mailing-list)
- exchange.xforce.ibmcloud.com/vulnerabilities/59293 (vdb-entry)
- www.securityfocus.com/bid/40494 (vdb-entry)
- secunia.com/advisories/40092 (third-party-advisory)
- support.ca.com/irj/portal/anonymous/phpsupcontent (Vendor Advisory)