CVE-2008-2163

IBM Lotus Quickr - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."

References (6)

[Vendor Advisory] http://secunia.com/advisories/30204

[Various Sources] http://www-01.ibm.com/support/docview.wss?uid=swg27013341

[Patch] http://www-1.ibm.com/support/docview.wss?uid=swg24018711

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42360

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/29175

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/1502/references

Scores

EPSS 0.0043

EPSS Percentile 62.1%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

ibm/lotus_quickr

Timeline

Published May 13, 2008

Tracked Since Feb 18, 2026