CVE-2010-2277: XSS
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2277?
CVE-2010-2277 has been classified with a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2010-2277?
To fix CVE-2010-2277, update IBM Lotus Connections to version 2.5.0.2 or later.
Which components are affected by CVE-2010-2277?
CVE-2010-2277 affects the Communities and Bookmarks components in IBM Lotus Connections.
Can CVE-2010-2277 be exploited remotely?
Yes, CVE-2010-2277 can be exploited remotely by injecting arbitrary web scripts or HTML.
What versions of IBM Lotus Connections are vulnerable to CVE-2010-2277?
IBM Lotus Connections versions 2.5.0.1 and 2.5.0 are vulnerable to CVE-2010-2277.