Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.hacktics.com/content/advisories/AdvIBM20100224.html | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56508 | vdb-entry x_refsource_XF |
| http://www.securitytracker.com/id?1023660 | vdb-entry x_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/509744/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://www-01.ibm.com/support/docview.wss?uid=swg21421469 | x_refsource_CONFIRM |
| http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233 | vendor-advisory x_refsource_AIXAPAR |
| http://www.securityfocus.com/bid/38412 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.hacktics.com/content/advisories/AdvIBM20100224.html | x_refsource_MISC x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56508 | vdb-entry x_refsource_XF x_transferred |
| http://www.securitytracker.com/id?1023660 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.securityfocus.com/archive/1/509744/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg21421469 | x_refsource_CONFIRM x_transferred |
| http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://www.securityfocus.com/bid/38412 | vdb-entry x_refsource_BID x_transferred |
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.3 | MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |