VulnerabilityModified

CVE-2010-2665

Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening…

MEDIUM 4.3EPSS 2.29%

Does this matter?

Lower severity and a low EPSS score (2.29%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 2.29% probability · 82th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: opera/opera browser
Source: cve@mitre.org

References

http://secunia.com/advisories/40250Vendor Advisory
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1011/
http://www.opera.com/docs/changelogs/windows/1054/
http://www.opera.com/support/kb/view/955/Vendor Advisory
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60646
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362
http://secunia.com/advisories/40250Vendor Advisory
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1011/
http://www.opera.com/docs/changelogs/windows/1054/
http://www.opera.com/support/kb/view/955/Vendor Advisory
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60646
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.