IBM Lotus Sametime Multiple Cross-Site Scripting Vulnerabilities

IBM Lotus Sametime Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

JVN#97334690: IBM Lotus vulnerable to denial-of-service (DoS)

IBM Lotus product line contains a denial-of-service DoS vulnerability due to an issue in Java Runtime Environment JRE. Impact A remote attacker may cause a denial-of-service DoS. Solution Apply a patch Apply the appropriate patch according to the information provided by the developer. Products...

CVE-2011-1106

Cross-site scripting XSS vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action...

Cross site scripting

Cross-site scripting XSS vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action...

CVE-2011-1106

Cross-site scripting XSS vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action...

CVE-2011-1106

The CVE-2011-1106 entry describes a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server’s Lotus Sametime component, specifically related to stcenter.nsf. The underlying issue is that an attacker can supply a crafted authReasonCode parameter in an OpenDatabase action, enabling re...

PT-2011-2871

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action. This occurs in...

CVE-2011-1106: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action...

CVE-2011-1038

Multiple cross-site scripting XSS vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the messageString parameter in a WebMessage action or 2 the PATHINFO...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the messageString parameter in a WebMessage action or 2 the PATHINFO...

CVE-2011-1038

The CVE corresponds to a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime 8.0.1, affecting the server’s stconf.nsf handling. The issue arises because input to the messageString parameter of a WebMessage action and the PATH_INFO is not properly sanitized, enabling remote attackers to...

CVE-2011-1038

Multiple cross-site scripting XSS vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the messageString parameter in a WebMessage action or 2 the PATHINFO...

PT-2011-2828

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime version 8.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the stconf.nsf component of the server. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

Domino Sametime 8.0.1 Cross Site Scripting

Class Input Validation Error CVE CVE-2011-1038 Remote Yes Local No Published Feb 16 2011 09:33AM Credit Dave Daly Vulnerable Domino Sametime 8.0.1 Domino Sametime is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...

IBM Lotus Sametime Server 8.0 - stcenter.nsf Cross-Site Scripting

IBM Lotus Sametime Server 8.0 - stcenter.nsf Cross-Site Scripting source: https://www.securityfocus.com/bid/46481/info IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to...

IBM Lotus Domino Sametime crossite scripting

stconf.nsf crossite scripting...

Re: Domino Sametime Multiple Reflected Cross-Site Scripting

Hi, I discovered similar XSS affecting Domino Sametime some time ago... This XSS affects other scripts also... i.e. stcenter.nsf Here's an example: /stcenter.nsf?OpenDatabase&authReasonCode="scriptalertdocument.cookie;/script" Cheers Andrew...

Domino Sametime Multiple Reflected Cross-Site Scripting

Class Input Validation Error CVE CVE-2011-1038 Remote Yes Local No Published Feb 16 2011 09:33AM Credit Dave Daly Vulnerable Domino Sametime 8.0.1 Domino Sametime is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...

IBM Lotus Sametime Server 'stconf.nsf' Cross Site Scripting Vulnerability

IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2011-1038: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the messageString parameter in a WebMessage action or 2 the PATHINFO...