CVEvulnerability
CVE-2008-2410
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm lotus domino web server (<= 8.0)
• ibm lotus domino web server 7.0
• ibm lotus domino web server 7.0.1
• ibm lotus domino web server 7.0.2
• ibm lotus domino web server 7.0.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30310 Vendor Advisory
- http://secunia.com/advisories/30332 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21303296 www-1.ibm.com
- http://www.securityfocus.com/bid/29311 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1597 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42553 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30310 Vendor Advisory
- http://secunia.com/advisories/30332 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21303296 www-1.ibm.com
- http://www.securityfocus.com/bid/29311 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1597 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42553 exchange.xforce.ibmcloud.com