Cross-Site Scripting Vulnerabilities in IBM Lotus Quickr Services
CVE-2008-3860

Currently unrated

Key Information:

Vendor
IBM
Status
Lotus Quickr
Vendor
CVE Published:
29 August 2008

Summary

IBM Lotus Quickr 8.1 services for Lotus Domino are susceptible to multiple cross-site scripting (XSS) vulnerabilities that enable remote attackers to inject arbitrary web scripts or HTML to compromise user security. These vulnerabilities manifest in various components, including WYSIWYG editors, local group creation, HTML redirects, and the rich text editor. Attackers can exploit unknown vectors to deliver malicious scripts, posing significant risks to user data. Proper measures, including patching by applying Hotfix 15, are crucial to mitigate these security threats.

References

http://osvdb.org/49776
vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1020762
vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilities/44694
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.