Unscored severity · published Jan 20, 2010
CVE-2010-0357
Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Lotus Web Content Management · Ibm
6.0.1.4; 6.0.1.5; 6.0.1.6; 6.1.0.1; 6.1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0357
Vendor Advisory
http://secunia.com/advisories/38174
securitytracker.com
http://securitytracker.com/id?1023463
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg1PM02704
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PM03233
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM04647
www.osvdb.org
http://www.osvdb.org/61711
More from Lotus Web Content Management
–
CVE-2010-0715
Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5,…
–
CVE-2010-0714
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0…