CVE-2008-0354 - Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim

Published Jan 18, 2008

4.3

MEDIUM

CVSS 2.0

EPSS 2.86%

Description

Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://secunia.com/advisories/27942
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21292938
x_refsource_CONFIRM
http://www.securityfocus.com/bid/27316
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019224
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/0168
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-0364
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39726
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/27942		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21292938		x_refsource_CONFIRM
http://www.securityfocus.com/bid/27316		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019224		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/0168		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-0364		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39726		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 18, 2008

Updated Aug 7, 2024

Reserved Jan 18, 2008

Link CVE-2008-0354

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-0354

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 18, 2008

Updated Aug 7, 2024

Link EUVD-2008-0364

GitHub

No data