CVE-2011-1106

Currently unrated

Key Information:

Vendor
IBM
Status
Lotus Sametime
Vendor
CVE Published:
1 March 2011

Summary

Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/65555
vdb-entryx_refsource_XF
http://archives.neohapsis.com/archives/bugtraq/2011-02/02...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/46481
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.