{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2010-0219/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2010-0219/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2010-0219/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2010-0219/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2010-0219/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2010-0219"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2010-0219"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.90851,
      "kev": false,
      "percentile": 0.99801
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2010/CVE-2010-0219.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2010-0219\n\ninfo:\n  name: Apache Axis2 Default Login\n  author: pikpikcu\n  severity: critical\n  description: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information or the ability to modify or delete data.\n  remediation: |\n    Disable or restrict access to the Axis2 web interface, or apply the necessary patches or updates provided by the vendor.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2010-0219\n    - https://knowledge.broadcom.com/external/article/13994/vulnerability-axis2-default-administrato.html\n    - http://www.rapid7.com/security-center/advisories/R7-0037.jsp\n    - http://www.vupen.com/english/advisories/2010/2673\n    - http://retrogod.altervista.org/9sg_ca_d2d.html\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C\n    cvss-score: 10\n    cve-id: CVE-2010-0219\n    cwe-id: CWE-255\n    epss-score: 0.90851\n    epss-percentile: 0.99801\n    cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: apache\n    product: axis2\n    shodan-query:\n      - http.html:\"Apache Axis\"\n      - http.html:\"apache axis\"\n    fofa-query: body=\"apache axis\"\n  tags: cve,cve2010,axis,apache,default-login,axis2,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /axis2-admin/login HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        loginUsername={{username}}&loginPassword={{password}}\n      - |\n        POST /axis2/axis2-admin/login HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        userName={{username}}&password={{password}}&submit=+Login+\n\n    payloads:\n      username:\n        - admin\n      password:\n        - axis2\n    attack: pitchfork\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"<h1>Welcome to Axis2 Web Admin Module !!</h1>\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100b2965d7241eb48dac8a05a5d478fa2fe160d7cce2ab31af4811e83a8336258fe022100ca08ff7571761478fa12b552dd3c67625b09318a174c76af5ab2addfdd6aa0e3:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2010-0219"
}