CVE-2009-3453

2009-09-2917:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template.

References

osvdb.org/58384

secunia.com/advisories/36899

www-01.ibm.com/support/docview.wss?uid=swg1LO36646

www-01.ibm.com/support/docview.wss?uid=swg21405163

www.securityfocus.com/bid/36527

www.securitytracker.com/id?1022952

www.vupen.com/english/advisories/2009/2779

exchange.xforce.ibmcloud.com/vulnerabilities/53489