Vulnerability Details CVE-2010-4544
Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.9%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO52324
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
- http://www.vupen.com/english/advisories/2010/3193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63977
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO52324
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
- http://www.vupen.com/english/advisories/2010/3193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63977
Products affected by CVE-2010-4544
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.1
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.2