Cross-Site Scripting Vulnerability in IBM FileNet P8 Application Engine
CVE-2009-4999

Currently unrated

Key Information:

Vendor

WordPress
Status
Filenet P8 Application Engine
Vendor
CVE Published:
20 September 2010

What is CVE-2009-4999?

A cross-site scripting (XSS) vulnerability exists in the Workplace component of IBM FileNet P8 Application Engine, allowing remote attackers to inject malicious web scripts or HTML through the Name field. This flaw can lead to unauthorized actions on behalf of users, potentially compromising confidential information and leading to further security risks.

References

http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/read...
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ34852
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.