Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2010-0920

Published: 03/03/2010 Updated: 04/03/2010
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Ibm

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.281 for Domino 8.0.2 FP4 allows remote malicious users to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Vulnerable Product Search on Vulmon Subscribe to Product

ibm lotus_inotes 229.241

ibm lotus_inotes 229.221

ibm lotus_inotes 229.151

ibm lotus_inotes 229.131

ibm lotus_inotes 229.041

ibm lotus_inotes 229.021

ibm lotus_inotes

ibm lotus_inotes 229.201

ibm lotus_inotes 229.191

ibm lotus_inotes 229.181

ibm lotus_inotes 229.171

ibm lotus_inotes 229.261

ibm lotus_inotes 229.251

ibm lotus_inotes 229.111

ibm lotus_inotes 229.101

ibm lotus_inotes 229.061

ibm lotus_inotes 229.051

ibm lotus_inotes 229.231

ibm lotus_inotes 229.211

ibm lotus_inotes 229.161

ibm lotus_inotes 229.141

ibm lotus_inotes 229.031

ibm lotus_inotes 229.011

References

CWE-79http://www.securityfocus.com/bid/38459http://www.vupen.com/english/advisories/2010/0496http://www-01.ibm.com/support/docview.wss?uid=swg27018109https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook