CVE-2010-3470

IBM FileNet P8 Application Engine <4.0.2.7-P8AE-FP007 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/43271

Various Sources x_refsource_confirm

http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/43272

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/41458

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/2419

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/41460

Various Sources x_refsource_confirm

http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm

Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37179

Scores

EPSS 0.0129

EPSS Percentile 67.3%

Details

CWE

CWE-79

Status published

Products (2)

ibm/filenet_p8_application_engine 3.5.1 (21 CPE variants)

ibm/filenet_p8_application_engine 4.0.2 (7 CPE variants)

Published Sep 20, 2010

Tracked Since Feb 18, 2026