CVE-2010-0927

IBM Lotus Domino <7.0.4, 8.0.2 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.

References (2)

Core 2

Scores

EPSS 0.0101
EPSS Percentile 59.7%

Details

CWE
CWE-79
Status published
Products (11)
ibm/lotus_domino 7.0
ibm/lotus_domino 7.0.1
ibm/lotus_domino 7.0.1.1
ibm/lotus_domino 7.0.2
ibm/lotus_domino 7.0.2.1
ibm/lotus_domino 7.0.2.2
ibm/lotus_domino 7.0.2.3
ibm/lotus_domino 7.0.3
ibm/lotus_domino 7.0.3.1
ibm/lotus_domino 8.0
... and 1 more
Published Mar 05, 2010
Tracked Since Feb 18, 2026