CVE-2010-2085

The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to…

published May 27, 2010

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the __VIEWSTATE parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08996 · 95.2th percentile
Published
2010-05-27T18:32Z
EPSS history
Timeline
  • 27 MAY 18:32Z
    The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to…
    cvelistv5