CVEvulnerability
CVE-2007-6295
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.
Affected configurations
• ibm lotus sametime (<= 8.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/39258 osvdb.org
- http://secunia.com/advisories/27941 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249 www-1.ibm.com
- http://www.securityfocus.com/bid/26734 www.securityfocus.com
- http://www.securitytracker.com/id?1019053 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4104 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38891 exchange.xforce.ibmcloud.com
- http://osvdb.org/39258 osvdb.org
- http://secunia.com/advisories/27941 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249 www-1.ibm.com
- http://www.securityfocus.com/bid/26734 www.securityfocus.com
- http://www.securitytracker.com/id?1019053 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4104 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38891 exchange.xforce.ibmcloud.com