Cross site scripting

2010-06-1514:30:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.

CPENameOperatorVersion
lotus_connectionseq2.5.0.1
lotus_connectionseq2.5.0

CPE	Name	Operator	Version
	lotus_connections	eq	2.5.0.1
	lotus_connections	eq	2.5.0

References

secunia.com/advisories/40007

www-01.ibm.com/support/docview.wss?uid=swg21431472

www-1.ibm.com/support/docview.wss?uid=swg1LO47214

www-1.ibm.com/support/docview.wss?uid=swg1LO47362

www-1.ibm.com/support/docview.wss?uid=swg1LO47921

www.vupen.com/english/advisories/2010/1281