CVE-2010-0920 - Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Published Mar 3, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 1.02%

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www-01.ibm.com/support/docview.wss?uid=swg27018109
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/38459
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/0496
vdb-entryx_refsource_VUPENVendor Advisory

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg27018109		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/38459		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/0496		vdb-entryx_refsource_VUPENVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 3, 2010

Updated Sep 16, 2024

Reserved Mar 3, 2010

Link CVE-2010-0920

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-0920

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-0920