CVE-2010-2087 describes a cross-site scripting (XSS) and arbitrary Expression Language (EL) execution vulnerability in Oracle Mojarra 1.2_14 and 2.0.2, affecting products like IBM WebSphere Application Server and Caucho Resin. This medium-complexity vulnerability (CVSS 4.3) allows unauthenticated remote attackers to manipulate unencrypted view states, leading to information disclosure or integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2_14CPE matchmatch criteria | cpe:2.3:a:oracle:mojarra:1.2_14:*:*:*:*:*:*:* | ||
2.0.2CPE matchmatch criteria | cpe:2.3:a:oracle:mojarra:2.0.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.