CVE-2008-2410

IBM Lotus Domino Web Server < 8.0 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (6)

[Vendor Advisory] http://secunia.com/advisories/30310

[Vendor Advisory] http://secunia.com/advisories/30332

[Various Sources] http://www-1.ibm.com/support/docview.wss?uid=swg21303296

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/29311

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42553

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/1597

Scores

EPSS 0.0046

EPSS Percentile 64.0%

Classification

CWE

CWE-79

Status draft

Affected Products (5)

ibm/lotus_domino_web_server < 8.0

ibm/lotus_domino_web_server

ibm/lotus_domino_web_server

ibm/lotus_domino_web_server

ibm/lotus_domino_web_server

Timeline

Published May 22, 2008

Tracked Since Feb 18, 2026