Lotus Connections (Ibm) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2013-04-23. Vendor: Ibm.
CVEs of Lotus Connections
- CVE-2013-0503 - CVSS 4.3 (medium), 2013-04-23: Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web…
- CVE-2011-1032 - CVSS 6.8 (medium), 2011-02-15: IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has…
- CVE-2011-1030 - CVSS 4.3 (medium), 2011-02-14: Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML…
- CVE-2010-2277 - CVSS 4.3 (medium), 2010-06-15: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or…
- CVE-2010-2280 - CVSS 4.3 (medium), 2010-06-15: Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web…
- CVE-2010-2279 - CVSS 7.6 (high), 2010-06-15: The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links,…
- CVE-2010-2278 - CVSS 4 (medium), 2010-06-15: The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might…
- CVE-2009-3816 - CVSS 4.3 (medium), 2009-10-28: Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to…
- CVE-2009-3469 - CVSS 4.3 (medium), 2009-09-29: Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web…
- CVE-2008-4806 - CVSS 7.5 (high), 2008-10-31: Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField…
- CVE-2008-4809 - CVSS 10 (critical), 2008-10-31: Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknown impact and attack vectors related to…
- CVE-2008-4805 - CVSS 4.3 (medium), 2008-10-31: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML…
- CVE-2008-4808 - CVSS 5 (medium), 2008-10-31: IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors. NOTE: the provenance of this information is unknown;…
- CVE-2008-4807 - CVSS 2.1 (low), 2008-10-31: IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive…
