CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Microsoft, Windows. Its EPSS score suggests a 21.0% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2010-2265
Severity
MEDIUM
CVSS
4.3
EPSS
20.99%
Microsoft Windows
Original NVD Description
Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.