CVE-2010-2433

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-24 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arbitrary web script or HTML via an RTS URL to (1) explore/explore.jsp, (2) compose/compose.jsp, or (3) home.jsp in faces/.

Affected products

IBM Websphere Ilog Jrules: 6.7

References

http://secunia.com/advisories/40275
http://www-01.ibm.com/support/docview.wss?uid=swg1RS00133
http://www.securityfocus.com/bid/41030
https://exchange.xforce.ibmcloud.com/vulnerabilities/59609
http://secunia.com/advisories/40275
http://www-01.ibm.com/support/docview.wss?uid=swg1RS00133
http://www.securityfocus.com/bid/41030
https://exchange.xforce.ibmcloud.com/vulnerabilities/59609

Get alerted when CVE-2010-2433 or the next vulnerability affects your stack