CVE-2010-0275

Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.141:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.151:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.161:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.171:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.181:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.191:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.201:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.211:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:229.221:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*

History

21 Nov 2024, 01:11

Type Values Removed Values Added
References () http://secunia.com/advisories/38026 - Vendor Advisory () http://secunia.com/advisories/38026 - Vendor Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg27017776 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg27017776 - Vendor Advisory
References () http://www.securityfocus.com/bid/37675 - () http://www.securityfocus.com/bid/37675 -
References () http://www.vupen.com/english/advisories/2010/0077 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/0077 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/55471 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/55471 -

Information

Published : 2010-01-09 18:30

Updated : 2024-11-21 01:11


NVD link : CVE-2010-0275

Mitre link : CVE-2010-0275

CVE.ORG link : CVE-2010-0275


JSON object : View

Products Affected

ibm

  • lotus_domino
  • lotus_inotes