CVE-2010-2277

published 2010-06-15

CVE-2010-2277: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_connections	—	—
ibm	lotus_connections	—	—

CWE-79