debian · CVE-2010-1594

Quick triage

Priority: unimportant Published: Updated: Sun, 05 Jul 2026 03:42:00 GMT

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2010-1594 unimportant priority: Debian including 1 source packages (ocsinventory-server), 3 status rows across 3 suites (bookworm, bullseye, sid): resolved 3.

Description:

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.

cvelogic Threat Intelligence