[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHJN0vN1WR9S41hrCSf424WGhzW1rLx1e5s491VR83r8":3,"g5a-risk:CVE-2010-3300":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":25,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":60,"weaknessesCount":69,"isActivelyExploited":70,"cisaInfo":25,"otxData":25,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":110,"notableEvents":111},"CVE-2010-3300","What is CVE-2010-3300?","It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.","2021-06-22T12:15:08.84","2021-06-25T17:38:46.163",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":21,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[29],{"Source":16,"Type":17,"CVSSData":30,"BaseSeverity":24,"ExploitabilityScore":35,"ImpactScore":36,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":20,"AccessComplexity":24,"Authentication":22,"ConfidentialityImpact":33,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.0045,[37,37,37,37,37,37,37],"Medium",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"owasp","enterprise_security_api_for_java","*","cpe:2.3:a:owasp:enterprise_security_api_for_java:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":31,"criteria":47,"vulnerable":4},"cpe:2.3:a:owasp:enterprise_security_api_for_java:2.0:-:*:*:*:*:*:*",2,[50,56],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fseclists.org\u002Foss-sec\u002F2010\u002Fq3\u002F357","Seclists",[54,55],"Mailing List","Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.usenix.org\u002Flegacy\u002Fevents\u002Fwoot10\u002Ftech\u002Ffull_papers\u002FRizzo.pdf","Usenix",[55],[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-649","Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking","The product uses obfuscation or encryption of inputs that should not be mutable by an external actor, but the product does not use integrity checks to detect if those inputs have been modified.","When an application relies on obfuscation or incorrectly applied \u002F weak encryption to protect client-controllable tokens or parameters, that may have an effect on the user state, system state, or some decision made on the server. Without protecting the tokens\u002Fparameters for integrity, the application is vulnerable to an attack where an adversary traverses the space of possible values of the said token\u002Fparameter in order to attempt to gain an advantage. The goal of the attacker is to find another admissible value that will somehow elevate their privileges in the system, disclose information or change the behavior of the system in some way beneficial to the attacker. If the application does not protect these critical tokens\u002Fparameters for integrity, it will not be able to determine that these values have been tampered with. Measures that are used to protect data for confidentiality should not be relied upon to provide the integrity service.","Incomplete","Base","Simple",1,false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2010-3300? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2010-3300, a medium severity cyber security vulnerability from 2021. It was found that all OWASP ESAPI for Java up to version 2...","CVE-2010-3300, CVE-2010-3300 vulnerability, CVE-2010-3300 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, owasp security, enterprise_security_api_for_java vulnerability","\u002Fwhat-is\u002Fcve-2010-3300",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":9,"dateModified":10,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2010-3300","Cybersecurity","CVE-2010-3300, CVE-2010-3300 vulnerability, CVE-2010-3300 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":25,"Negate":25,"Nodes":99},[100],{"Operator":101,"Negate":25,"CPEMatch":102},"OR",[103,105,107],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":31,"VersionEndIncluding":25},"A18BAA8C-904F-4669-B466-25A7325E00BB",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":106,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B905DADA-68DB-44A3-8C44-0935E69813FF",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":109,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:owasp:enterprise_security_api_for_java:2.0:rc1:*:*:*:*:*:*","888771B8-9537-4CB3-AD8A-FDD443C0ADCE",[],[],{"lastModified":10,"cacheTime":113,"version":31},1792266171783,{"score":115,"band":116,"action":117,"scoredAt":118},21,"Low","Monitor","2026-10-16T06:51:24.070406+00:00"]