CVE-2010-1223: Ca Xosoft Content Distribution

High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.

Affected products

• Ca Xosoft Content Distribution: version r12.0 only; version r12.5 only
• Ca Xosoft High Availability: version r12.0 only; version r12.5 only
• Ca Xosoft Replication: version r12.0 only; version r12.5 only

Published 2010-04-07. Last modified 2026-06-16.