CVE-2010-0714

  • Last update: Apr 13, 2023

Description

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

Software From Fixed in
ibm / websphere_portal 5.1.0.0 5.1.0.0.x
ibm / websphere_portal 5.1.0.1 5.1.0.1.x
ibm / websphere_portal 5.1.0.2 5.1.0.2.x
ibm / websphere_portal 5.1.0.3 5.1.0.3.x
ibm / websphere_portal 5.1.0.4 5.1.0.4.x
ibm / websphere_portal 5.1.0.5 5.1.0.5.x
ibm / websphere_portal 6.0.0.0 6.0.0.0.x
ibm / websphere_portal 6.0.0.1 6.0.0.1.x
ibm / websphere_portal 6.0.0.2 6.0.0.2.x
ibm / websphere_portal 6.0.0.3 6.0.0.3.x
ibm / websphere_portal 6.0.0.4 6.0.0.4.x
ibm / websphere_portal 6.0.1.0 6.0.1.0.x
ibm / websphere_portal 6.0.1.1 6.0.1.1.x
ibm / websphere_portal 6.0.1.2 6.0.1.2.x
ibm / websphere_portal 6.0.1.3 6.0.1.3.x
ibm / websphere_portal 6.0.1.4 6.0.1.4.x
ibm / websphere_portal 6.0.1.5 6.0.1.5.x
ibm / websphere_portal 6.0.1.6 6.0.1.6.x
ibm / websphere_portal 6.0.1.7 6.0.1.7.x
ibm / websphere_portal 6.1.0.0 6.1.0.0.x
ibm / websphere_portal 6.1.0.1 6.1.0.1.x
ibm / websphere_portal 6.1.0.2 6.1.0.2.x
ibm / websphere_portal 6.1.0.3 6.1.0.3.x
ibm / websphere_portal 6.1.5.0 6.1.5.0.x
ibm / lotus_quickr 8.0 8.0.x
ibm / lotus_quickr 8.0.0.2 8.0.0.2.x
ibm / lotus_quickr 8.1 8.1.x
ibm / lotus_quickr 8.1.1 8.1.1.x
ibm / lotus_quickr 8.1.1.1 8.1.1.1.x
ibm / lotus_web_content_management 5.1.0.0 5.1.0.0.x
ibm / lotus_web_content_management 5.1.0.1 5.1.0.1.x
ibm / lotus_web_content_management 5.1.0.2 5.1.0.2.x
ibm / lotus_web_content_management 5.1.0.3 5.1.0.3.x
ibm / lotus_web_content_management 5.1.0.4 5.1.0.4.x
ibm / lotus_web_content_management 5.1.0.5 5.1.0.5.x
ibm / lotus_web_content_management 6.0.0.0 6.0.0.0.x
ibm / lotus_web_content_management 6.0.0.1 6.0.0.1.x
ibm / lotus_web_content_management 6.0.0.2 6.0.0.2.x
ibm / lotus_web_content_management 6.0.0.3 6.0.0.3.x
ibm / lotus_web_content_management 6.0.0.4 6.0.0.4.x
ibm / lotus_web_content_management 6.0.1.0 6.0.1.0.x
ibm / lotus_web_content_management 6.0.1.1 6.0.1.1.x
ibm / lotus_web_content_management 6.0.1.2 6.0.1.2.x
ibm / lotus_web_content_management 6.0.1.3 6.0.1.3.x
ibm / lotus_web_content_management 6.0.1.4 6.0.1.4.x
ibm / lotus_web_content_management 6.0.1.5 6.0.1.5.x
ibm / lotus_web_content_management 6.0.1.6 6.0.1.6.x
ibm / lotus_web_content_management 6.0.1.7 6.0.1.7.x
ibm / lotus_web_content_management 6.1.0.0 6.1.0.0.x
ibm / lotus_web_content_management 6.1.0.1 6.1.0.1.x
ibm / lotus_web_content_management 6.1.0.2 6.1.0.2.x
ibm / lotus_web_content_management 6.1.0.3 6.1.0.3.x
ibm / lotus_web_content_management 6.1.5.0 6.1.5.0.x
ibm / lotus_workplace_web_content_management 5.1.0.0 5.1.0.0.x
ibm / lotus_workplace_web_content_management 5.1.0.1 5.1.0.1.x
ibm / lotus_workplace_web_content_management 5.1.0.2 5.1.0.2.x
ibm / lotus_workplace_web_content_management 5.1.0.3 5.1.0.3.x
ibm / lotus_workplace_web_content_management 5.1.0.4 5.1.0.4.x
ibm / lotus_workplace_web_content_management 5.1.0.5 5.1.0.5.x
ibm / lotus_workplace_web_content_management 6.0.0.0 6.0.0.0.x
ibm / lotus_workplace_web_content_management 6.0.0.1 6.0.0.1.x
ibm / lotus_workplace_web_content_management 6.0.0.2 6.0.0.2.x
ibm / lotus_workplace_web_content_management 6.0.0.3 6.0.0.3.x
ibm / lotus_workplace_web_content_management 6.0.0.4 6.0.0.4.x
ibm / lotus_workplace_web_content_management 6.0.1.0 6.0.1.0.x
ibm / lotus_workplace_web_content_management 6.0.1.1 6.0.1.1.x
ibm / lotus_workplace_web_content_management 6.0.1.2 6.0.1.2.x
ibm / lotus_workplace_web_content_management 6.0.1.3 6.0.1.3.x
ibm / lotus_workplace_web_content_management 6.0.1.4 6.0.1.4.x
ibm / lotus_workplace_web_content_management 6.0.1.5 6.0.1.5.x
ibm / lotus_workplace_web_content_management 6.0.1.6 6.0.1.6.x
ibm / lotus_workplace_web_content_management 6.0.1.7 6.0.1.7.x
ibm / lotus_workplace_web_content_management 6.1.0.0 6.1.0.0.x
ibm / lotus_workplace_web_content_management 6.1.0.1 6.1.0.1.x
ibm / lotus_workplace_web_content_management 6.1.0.2 6.1.0.2.x
ibm / lotus_workplace_web_content_management 6.1.0.3 6.1.0.3.x
ibm / lotus_workplace_web_content_management 6.1.5.0 6.1.5.0.x

Details

    • Severity: Low
  • CVE: CVE-2010-0714
  • Published: Feb 26, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs

OWASP TOP 10