CVE-2009-3816

IBM Lotus Connections 2.5.0.0 - Cross-Site Scripting in Mobile Activities Pages

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37106
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg24024303

Scores

EPSS 0.0102
EPSS Percentile 59.9%

Details

CWE
CWE-79
Status published
Products (1)
ibm/lotus_connections 2.5.0.0
Published Oct 28, 2009
Tracked Since Feb 18, 2026