CVE-2010-2277

EUVD-2010-2287
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
ibmlotus_connections
2.5.0
ibmlotus_connections
2.5.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/40007
http://www-01.ibm.com/support/docview.wss?uid=swg21431472
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921
http://www.vupen.com/english/advisories/2010/1281
http://secunia.com/advisories/40007
http://www-01.ibm.com/support/docview.wss?uid=swg21431472
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921
http://www.vupen.com/english/advisories/2010/1281