CVE-2010-0927: XSS

Published Mar 5, 2010

Updated

Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.

Affected Software

11 affected components

IBM Lotus Domino=7.0

IBM Lotus Domino=7.0.1

IBM Lotus Domino=7.0.1.1

IBM Lotus Domino=7.0.2

IBM Lotus Domino=7.0.2.1

IBM Lotus Domino=7.0.2.2

IBM Lotus Domino=7.0.2.3

IBM Lotus Domino=7.0.3

IBM Lotus Domino=7.0.3.1

IBM Lotus Domino=8.0

IBM Lotus Domino=8.0.1

Event History

Mar 5, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0927?

CVE-2010-0927 is classified as a moderate severity cross-site scripting vulnerability.

How do I fix CVE-2010-0927?

To fix CVE-2010-0927, upgrade IBM Lotus Domino to version 7.0.4 or later for 7.x and to 8.0.2 or later for 8.x.

What components are affected by CVE-2010-0927?

CVE-2010-0927 affects the Help component of IBM Lotus Domino, specifically the help/readme.nsf/Header.

Who can exploit CVE-2010-0927?

CVE-2010-0927 can be exploited by remote attackers to inject arbitrary web scripts or HTML.

What parameter does CVE-2010-0927 target?

CVE-2010-0927 targets the BaseTarget parameter in an OpenPage action.