CVE-2010-2277

IBM Lotus Connections 2.5.x - Cross-Site Scripting via Communities, Bookmarks, or Mobile Blogs

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.

References (6)

Core 6
Core References
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1281
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40007
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21431472

Scores

EPSS 0.0122
EPSS Percentile 65.6%

Details

CWE
CWE-79
Status published
Products (2)
ibm/lotus_connections 2.5.0
ibm/lotus_connections 2.5.0.1
Published Jun 15, 2010
Tracked Since Feb 18, 2026