CVE-2010-0920

IBM Lotus iNotes < 229.281 - Cross-Site Scripting via Missing XSS/CSRF Get Filter

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

References (3)

Core 3

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/0496

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/38459

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg27018109

Scores

EPSS 0.0103

EPSS Percentile 60.2%

Details

CWE

CWE-79

Status published

Products (23)

ibm/lotus_inotes 229.011

ibm/lotus_inotes 229.021

ibm/lotus_inotes 229.031

ibm/lotus_inotes 229.041

ibm/lotus_inotes 229.051

ibm/lotus_inotes 229.061

ibm/lotus_inotes 229.101

ibm/lotus_inotes 229.111

ibm/lotus_inotes 229.131

ibm/lotus_inotes 229.141

... and 13 more

Published Mar 03, 2010

Tracked Since Feb 18, 2026