CVE-2010-0927

published 2010-03-05

CVE-2010-0927: Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—

CWE-79