CVE-2010-0927: XSS
First published: Fri Mar 05 2010(Updated: )
Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Lotus Domino R5 | =7.0 | |
| IBM Lotus Domino R5 | =7.0.1 | |
| IBM Lotus Domino R5 | =7.0.1.1 | |
| IBM Lotus Domino R5 | =7.0.2 | |
| IBM Lotus Domino R5 | =7.0.2.1 | |
| IBM Lotus Domino R5 | =7.0.2.2 | |
| IBM Lotus Domino R5 | =7.0.2.3 | |
| IBM Lotus Domino R5 | =7.0.3 | |
| IBM Lotus Domino R5 | =7.0.3.1 | |
| IBM Lotus Domino R5 | =8.0 | |
| IBM Lotus Domino R5 | =8.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-0927?
CVE-2010-0927 is classified as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2010-0927?
To fix CVE-2010-0927, upgrade IBM Lotus Domino to version 7.0.4 or later for 7.x and to 8.0.2 or later for 8.x.
What components are affected by CVE-2010-0927?
CVE-2010-0927 affects the Help component of IBM Lotus Domino, specifically the help/readme.nsf/Header.
Who can exploit CVE-2010-0927?
CVE-2010-0927 can be exploited by remote attackers to inject arbitrary web scripts or HTML.
What parameter does CVE-2010-0927 target?
CVE-2010-0927 targets the BaseTarget parameter in an OpenPage action.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm lotus domino
- version/ibm lotus domino/7.0.2.2
- version/ibm lotus domino/7.0.1.1
- version/ibm lotus domino/7.0.2.1
- version/ibm lotus domino/7.0.2.3
- version/ibm lotus domino/7.0.3
- version/ibm lotus domino/7.0
- version/ibm lotus domino/7.0.2
- version/ibm lotus domino/8.0
- version/ibm lotus domino/7.0.1
- version/ibm lotus domino/7.0.3.1
- version/ibm lotus domino/8.0.1