Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2010-02-26T19:00:00
Updated: 2018-10-10T18:57:01
Reserved: 2010-02-26T00:00:00
Link: CVE-2010-0714
JSON object: View
NVD Information
Status : Modified
Published: 2010-02-26T19:30:00.743
Modified: 2018-10-10T19:53:26.387
Link: CVE-2010-0714
JSON object: View
Redhat Information
No data.
CWE