CVE-2007-6295

IBM Lotus Sametime < 8.0 - Cross-Site Scripting via WebRunMenuFrame URI

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38891
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26734
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/39258
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/4104
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27941
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019053

Scores

EPSS 0.0126
EPSS Percentile 66.6%

Details

CWE
CWE-79
Status published
Products (1)
ibm/lotus_sametime < 8.0
Published Dec 10, 2007
Tracked Since Feb 18, 2026