CVE-2010-0219
High PUBLISHEDApache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of...
Recommended Action
Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
At a Glance
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.
- CVE Published
- Oct 18, 2010
- Exploitation Reported
- Apr 23, 2025
- CVSS
- 10.0 High
- EPSS
- 89.9%
CVE References
- 41799 secunia.com · Third-Party Advisory http://secunia.com/advisories/41799
- 42763 secunia.com · Third-Party Advisory http://secunia.com/advisories/42763
- VU#989719 kb.cert.org · Third-Party Advisory http://www.kb.cert.org/vuls/id/989719
- 15869 exploit-db.com · Exploit http://www.exploit-db.com/exploits/15869
- 70233 osvdb.org · VDB Entry http://www.osvdb.org/70233
Show 9 more references
- ADV-2010-2673 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/2673
- businessobjects-dswsbobje-security-bypass(62523) exchange.xforce.ibmcloud.com · VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
- 1024929 securitytracker.com · VDB Entry http://www.securitytracker.com/id?1024929
- 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password securityfocus.com · Mailing List http://www.securityfocus.com/archive/1/514284/100/0/threaded
- kb.juniper.net/KB27373 kb.juniper.net · CVE Record https://kb.juniper.net/KB27373
- retrogod.altervista.org/9sg_ca_d2d.html retrogod.altervista.org · CVE Record http://retrogod.altervista.org/9sg_ca_d2d.html
- spl0it.org/files/talks/source_barcelona10/Hacking%20SAP... spl0it.org · CVE Record http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20Busi...
- rapid7.com/security-center/advisories/R7-0037.jsp rapid7.com · CVE Record http://www.rapid7.com/security-center/advisories/R7-0037.jsp
- service.sap.com/sap/support/notes/1432881 service.sap.com · CVE Record https://service.sap.com/sap/support/notes/1432881
Known Exploited Vulnerability Sources
Catalogues that list this CVE as a known exploited vulnerability.
Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.
Learn about Pro API access| Source | Added |
|---|---|
| The Shadowserver First | 2025-04-23 00:00 UTC |
Scanner Artifacts
Scanner and exploit-framework references linked to this CVE.
| Scanner | Reference | Detected |
|---|---|---|
| Metasploit | https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/axis2_deployer.rb | Apr 28, 2025 |
| Nuclei | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0219.yaml | Apr 25, 2025 |
Virtual Patch
Compensating WAF rules to help reduce exposure to this CVE. Rule content and deployable vendor exports are available with KEVIntel Enterprise.
KEVIntel does not currently have a virtual patch for this CVE. When available, KEVIntel virtual patches ship as deployable ModSecurity, Cloudflare, and AWS WAF rules.
Enterprise feature. Virtual patch rule content and deployable vendor exports (ModSecurity, Cloudflare, AWS WAF) are available to KEVIntel Enterprise users.
CVSS Scores
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitation Status
Exploited in the wild
Recorded 2025-04-23 00:00:00 UTC · The Shadowserver
Proof of concept available
Recorded 2024-07-28 14:10:52 UTC · GitHub
Weaknesses (CWE)
-
Credentials Management Errors
Scanner Integrations
Nuclei, Metasploit, and other scanner references for this CVE are listed on the Detection tab.
Potential Proof of Concepts
These PoCs are unverified and could contain malware. Use at your own risk.
github · Created 2024-07-28 14:10:52 UTC · 1 stars
nuclei · Created Unknown
Timeline
Key exploitation, disclosure, scanner coverage, and KEV attestation events for this CVE.
-
15:02 UTC over 1 year ago15:02 UTC · over 1 year ago
Metasploit module available
Exploit module available
-
00:00 UTC over 1 year ago00:00 UTC · over 1 year ago
Nuclei template available
Scanner coverage available
-
00:00 UTC over 1 year ago00:00 UTC · over 1 year ago
Added to KEVIntel KEV Feed
High-confidence, third-party attested exploitation
-
14:10 UTC about 2 years ago14:10 UTC · about 2 years ago
Public PoC available
Public proof-of-concept code published
-
16:00 UTC almost 16 years ago16:00 UTC · almost 16 years ago
CVE published
Vulnerability disclosed publicly
-
00:00 UTC over 16 years ago00:00 UTC · over 16 years ago
CVE ID reserved
Identifier reserved by the CNA
Automate This Intelligence with the Pro API
Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.
Pro API Example
GET /api/v2/pro/kevs/CVE-2010-0219
{
"cve_id": "CVE-2010-0219",
"title": "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3...",
"affected_vendor": "Apache",
"affected_product": "Axis2",
"affected_versions": [
{ "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
],
"confidence": "High",
"cvss_score": 10.0,
"epss_score": 0.89871,
"exploit_status": {
"exploited_in_the_wild": true,
"active_exploitation_observed": false
},
"sensor_telemetry": { "...": "Pro API fields" },
"proof_of_concepts": [ "..." ],
"scanner_integrations": [ "..." ]
}