Lucene search
MitreCVE-2010-0920HistoryMar 03, 2010 - 7:30 p.m.
CVE-2010-0920
2010-03-0319:30:00
CWE-79
mitre
web.nvd.nist.gov
23
ibm
lotus
inotes
xss
vulnerability
domino
web access
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
55.2%
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of “XSS/CSRF Get Filter and Referer Check fixes.”
Affected configurations
Node
ibmlotus_inotesRange≤229.271
ORibmlotus_inotesMatch229.011
ORibmlotus_inotesMatch229.021
ORibmlotus_inotesMatch229.031
ORibmlotus_inotesMatch229.041
ORibmlotus_inotesMatch229.051
ORibmlotus_inotesMatch229.061
ORibmlotus_inotesMatch229.101
ORibmlotus_inotesMatch229.111
ORibmlotus_inotesMatch229.131
ORibmlotus_inotesMatch229.141
ORibmlotus_inotesMatch229.151
ORibmlotus_inotesMatch229.161
ORibmlotus_inotesMatch229.171
ORibmlotus_inotesMatch229.181
ORibmlotus_inotesMatch229.191
ORibmlotus_inotesMatch229.201
ORibmlotus_inotesMatch229.211
ORibmlotus_inotesMatch229.221
ORibmlotus_inotesMatch229.231
ORibmlotus_inotesMatch229.241
ORibmlotus_inotesMatch229.251
ORibmlotus_inotesMatch229.261
ibmlotus_dominoMatch8.0.2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_inotes | * | cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.011 | cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.021 | cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.031 | cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.041 | cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.051 | cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.061 | cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.101 | cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.111 | cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:* |
| ibm | lotus_inotes | 229.131 | cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-0920
2010-03-03 19:00:00
CVE-2010-0927
2010-03-05 17:00:00
nvd
nvd
CVE-2010-0920
2010-03-03 19:30:00
CVE-2010-0927
2010-03-05 17:30:00
prion
prion
Cross site scripting
2010-03-03 19:30:00
Cross site scripting
2010-03-05 17:30:00
cve
cve
CVE-2010-0927
2010-03-05 17:30:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
55.2%
Related for CVE-2010-0920