CVE-2011-1030

EUVD-2011-1046
Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
ibmlotus_connections
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/43134
http://securitytracker.com/id?1025054
http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1LO57850
http://www.ibm.com/support/docview.wss?uid=swg1LO57850
http://secunia.com/advisories/43134
http://securitytracker.com/id?1025054
http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1LO57850
http://www.ibm.com/support/docview.wss?uid=swg1LO57850