CVE-2010-1594: Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allo...

Security readout for executives and security teams

CVE-2010-1594 is an old cross-site scripting issue in OCS Inventory NG 1.02.1. If the affected reporting interface is still exposed, an attacker could make a user’s browser run unwanted script in the context of that application. The sources do not provide a CVSS score or current exploitation evidence. Exposure is most likely where legacy OCS Inventory NG 1.02.1 reporting pages remain reachable, especially to administrators or inventory operators. Internet exposure would increase concern, but the bundle does not state how commonly this component is deployed or exposed today. Treat this as a legacy exposure cleanup item unless the affected interface is internet-facing or used by privileged administrators. Prioritize confirming whether OCS Inventory NG 1.02.1 still exists in the environment, then update, restrict, or retire it. Mitigation focus: Identify any OCS Inventory NG 1.02.1 deployments.; Check OCS Inventory NG, Mandriva, and distribution guidance for applicable updates.; Apply vendor or distribution fixes where confirmed applicable..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.