CVE-2010-2654

N/A Unknown
Published: July 08, 2010 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://dsecrg.com/pages/vul/show.php?id=154
Source: cve@mitre.org
Exploit
http://osvdb.org/66122
Source: cve@mitre.org
http://osvdb.org/66125
Source: cve@mitre.org
http://osvdb.org/66126
Source: cve@mitre.org
http://osvdb.org/66127
Source: cve@mitre.org
http://osvdb.org/66128
Source: cve@mitre.org
http://osvdb.org/66129
Source: cve@mitre.org
http://osvdb.org/66130
Source: cve@mitre.org
http://www.exploit-db.com/exploits/14237/
Source: cve@mitre.org
Exploit
http://www.securityfocus.com/bid/41383
Source: cve@mitre.org
Exploit
http://dsecrg.com/pages/vul/show.php?id=154
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://osvdb.org/66122
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66125
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66126
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66127
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66128
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66129
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/66130
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.exploit-db.com/exploits/14237/
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/bid/41383
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

20 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.4%
88th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

ibm

Related CVEs

CVE-2026-44403 7.2
CVE-2026-44246 7.2
CVE-2026-44240 7.5
CVE-2026-44232 N/A
CVE-2026-44224 N/A