Lucene search

[email protected]CVE-2008-6105

HistoryFeb 10, 2009 - 10:00 p.m.

CVE-2008-6105

2009-02-1022:00:02

CWE-79

[email protected]

web.nvd.nist.gov

ibm

workplace

business controls

reporting

xss

vulnerability

web content management

ibm workplace web content management 6.x

cve-2008-6105

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

ibmworkplace_for_business_controls_and_reportingMatch2.0

ibmworkplace_web_content_managementMatch6.0

CPENameOperatorVersion
ibm:workplace_for_business_controls_and_reportingibm workplace for business controls and reportingeq2.0
ibm:workplace_web_content_managementibm workplace web content managementeq6.0

CPE	Name	Operator	Version
ibm:workplace_for_business_controls_and_reporting	ibm workplace for business controls and reporting	eq	2.0
ibm:workplace_web_content_management	ibm workplace web content management	eq	6.0

References

secunia.com/advisories/30433

www-1.ibm.com/support/docview.wss?uid=swg1PJ33180

www.securityfocus.com/bid/29625

www.securitytracker.com/id?1020236

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

Related for CVE-2008-6105

cvelist1 nvd1 prion1