VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2010· Updated Jun 16, 2026

CVE-2010-4007

CVE-2010-4007

Description

Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

23
  • Oracle Corporation/Mojarra23 versions
    cpe:2.3:a:oracle:mojarra:1.1:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:oracle:mojarra:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.1_02:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_01:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_02:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_03:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_04:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_05:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_06:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_07:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_08:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_09:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_10:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_11:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_12:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_13:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_14:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:1.2_15:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:mojarra:2.0.3:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.