CVEvulnerability
CVE-2008-3860
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (4) in the HTML import, (5) in the Rich text editor, and (6) in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inject arbitrary web script or HTML via unknown vectors, including (7) the Imported Page. NOTE: the vulnerability in the WYSIWYG editors may exist because of an incomplete fix for CVE-2008-2163.
Affected configurations
• ibm lotus quickr 8.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/49772 osvdb.org
- http://osvdb.org/49776 osvdb.org
- http://secunia.com/advisories/31634 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27013341 www-01.ibm.com
- http://www.securitytracker.com/id?1020762 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2444 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44694 exchange.xforce.ibmcloud.com
- http://osvdb.org/49772 osvdb.org
- http://osvdb.org/49776 osvdb.org
- http://secunia.com/advisories/31634 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27013341 www-01.ibm.com
- http://www.securitytracker.com/id?1020762 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2444 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44694 exchange.xforce.ibmcloud.com