CVEvulnerability
CVE-2010-1242
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-04-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm webi (<= 1.0.3)
• ibm webi 1.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/39186 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24025662 Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/0733 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0834 www.vupen.com
- http://secunia.com/advisories/39186 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24025662 Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/0733 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0834 www.vupen.com