CVE-2010-3472

Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: Sep 20, 2010
Updated: Nov 9, 2025
CVE: CVE-2010-3472
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ibm / filenet_p8_application_engine	3.5.1-009	3.5.1-009.x
ibm / filenet_p8_application_engine	3.5.1-011	3.5.1-011.x
ibm / filenet_p8_application_engine	3.5.1-005	3.5.1-005.x
ibm / filenet_p8_application_engine	3.5.1-014	3.5.1-014.x
ibm / filenet_p8_application_engine	3.5.1-006	3.5.1-006.x
ibm / filenet_p8_application_engine	3.5.1-013	3.5.1-013.x
ibm / filenet_p8_application_engine	3.5.1-016	3.5.1-016.x
ibm / filenet_p8_application_engine	3.5.1-004	3.5.1-004.x
ibm / filenet_p8_application_engine	3.5.1	3.5.1.x
ibm / filenet_p8_application_engine	3.5.1-018	3.5.1-018.x
ibm / filenet_p8_application_engine	3.5.1-019	3.5.1-019.x
ibm / filenet_p8_application_engine	3.5.1-007	3.5.1-007.x
ibm / filenet_p8_application_engine	3.5.1-001	3.5.1-001.x
ibm / filenet_p8_application_engine	3.5.1-012	3.5.1-012.x
ibm / filenet_p8_application_engine	3.5.1-015	3.5.1-015.x
ibm / filenet_p8_application_engine	3.5.1-010	3.5.1-010.x
ibm / filenet_p8_application_engine	3.5.1-002	3.5.1-002.x
ibm / filenet_p8_application_engine	3.5.1-008	3.5.1-008.x
ibm / filenet_p8_application_engine	3.5.1-020	3.5.1-020.x
ibm / filenet_p8_application_engine	3.5.1-003	3.5.1-003.x
ibm / filenet_p8_application_engine	3.5.1-017	3.5.1-017.x

Vulnerability Database

319,195

CVE-2010-3472

Deep Security Visibility Without the Complexity