CVE-2010-1942

CVE-2010-1942 is a medium-severity vulnerability in Fujitsu Interstage Application Server with a CVSS 2.0 base score of 6.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 6.4)
• EPSS exploit prediction: 2% (72nd percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Fujitsu Interstage Application Server
• Published: 2010-05-19
• Last modified: 2026-06-16

Description

Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.

Frequently asked questions

What is CVE-2010-1942?

Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.

How severe is CVE-2010-1942?

CVE-2010-1942 has a CVSS 2.0 base score of 6.4, rated medium severity.

Is CVE-2010-1942 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-1942?

CVE-2010-1942 primarily affects Fujitsu Interstage Application Server. In total, 19 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-1942?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2010-1942 published?

CVE-2010-1942 was published on 2010-05-19 and last updated on 2026-06-16.

References

• http://jvn.jp/en/jp/JVN90248889/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html
• http://osvdb.org/64703
• http://secunia.com/advisories/39803
• http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html
• http://www.securityfocus.com/bid/40189
• http://www.vupen.com/english/advisories/2010/1165
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58634

Affected products (19)

• cpe:2.3:a:fujitsu:interstage_application_server:3.0:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:3.0:*:standard:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:standard:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:web_j:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:4.1:*:standard:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:4.1:*:web_j:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:standard:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:web_j:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:5.0.1:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:5.0.1:*:plus_developer:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:6.0:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:6.0:*:plus:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:standard:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*
• cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*

More vulnerabilities in Fujitsu Interstage Application Server

• CVE-2013-7105 — Critical (CVSS 10.0): Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server…
• CVE-2019-13163 — Medium (CVSS 5.9): The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle…
• CVE-2008-7195 — Medium (CVSS 5.0): Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise…
• CVE-2008-7194 — Medium (CVSS 5.0): Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1,…
• CVE-2007-5366 — Medium (CVSS 5.0): The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage…
• CVE-2007-1504 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer)…

All CVEs affecting Fujitsu Interstage Application Server →