CVE Feed

    Dashboard / CVE / CVE-2010-0219

    CVE-2010-0219

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

    Published:Oct 18, 2010
    Last Modified:Apr 11, 2025
    EPS:Oct 18, 2010
    EPSS Score:0.93421
    CVSS Score:10

    Affected Products

    Vendor
    Apache
    Product
    Axis2
    Vendor
    Sap
    Product
    Businessobjects

    Exploits

    http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdfhttp://www.rapid7.com/security-center/advisories/R7-0037.jsphttp://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdfhttp://www.rapid7.com/security-center/advisories/R7-0037.jsphttps://www.exploit-db.com/exploits/16312https://github.com/veritas-rt/CVE-2010-0219https://github.com/vvts-alpha/CVE-2010-0219https://www.exploit-db.com/exploits/15869https://www.exploit-db.com/exploits/16315

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://retrogod.altervista.org/9sg_ca_d2d.html
    http://secunia.com/advisories/41799
    http://secunia.com/advisories/42763
    http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
    http://www.exploit-db.com/exploits/15869
    http://www.kb.cert.org/vuls/id/989719
    http://www.osvdb.org/70233
    http://www.rapid7.com/security-center/advisories/R7-0037.jsp
    http://www.securityfocus.com/archive/1/514284/100/0/threaded
    http://www.securitytracker.com/id?1024929
    http://www.vupen.com/english/advisories/2010/2673
    https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
    https://kb.juniper.net/KB27373
    https://service.sap.com/sap/support/notes/1432881
    http://retrogod.altervista.org/9sg_ca_d2d.html
    http://secunia.com/advisories/41799
    http://secunia.com/advisories/42763
    http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
    http://www.exploit-db.com/exploits/15869
    http://www.kb.cert.org/vuls/id/989719
    http://www.osvdb.org/70233
    http://www.rapid7.com/security-center/advisories/R7-0037.jsp
    http://www.securityfocus.com/archive/1/514284/100/0/threaded
    http://www.securitytracker.com/id?1024929
    http://www.vupen.com/english/advisories/2010/2673
    https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
    https://kb.juniper.net/KB27373
    https://service.sap.com/sap/support/notes/1432881

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High