VULNERABILITY INTELLIGENCE

CVE-2010-0362

CVSS score5 MEDIUM

EPSS probability1.47%

CISA KEVNot currently listed

Published2010-01-20

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.