CVEvulnerability
CVE-2009-3816
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm lotus connections 2.5.0.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/37106 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24024303 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637 www-1.ibm.com
- http://secunia.com/advisories/37106 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24024303 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637 www-1.ibm.com