CVEvulnerability
CVE-2010-2277
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.
Affected configurations
• ibm lotus connections 2.5.0
• ibm lotus connections 2.5.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/40007 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/1281 Patch, Vendor Advisory
- http://secunia.com/advisories/40007 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/1281 Patch, Vendor Advisory