GCVE - cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Connections (`f770c870-80a9-5319-9b9c-940323978de5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4808`	vulnerable	2026-06-08 04:50:48.336339	Details available IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-10-31T17:18:00.000Z Updated: 2024-08-07T10:31:28.162Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32466 http://www.securityfocus.com/bid/31989 http://www-01.ibm.com/support/docview.wss?uid=swg27014008 https://exchange.xforce.ibmcloud.com/vulnerabilities/46216	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4807`	vulnerable	2026-06-08 04:50:48.336012	Details available IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-10-31T17:18:00.000Z Updated: 2024-08-07T10:31:27.171Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46213 http://secunia.com/advisories/32466 http://www.securityfocus.com/bid/31989 http://www-01.ibm.com/support/docview.wss?uid=swg27014008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4806`	vulnerable	2026-06-08 04:50:48.335666	Details available Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-10-31T17:18:00.000Z Updated: 2024-08-07T10:31:27.580Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32466 https://exchange.xforce.ibmcloud.com/vulnerabilities/46212 http://www.securityfocus.com/bid/31989 http://www-01.ibm.com/support/docview.wss?uid=swg27014008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4805`	vulnerable	2026-06-08 04:50:48.335245	Details available Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the community title, (2) API input, and vectors related to the (3) Homepage, (4) Blogs, (5) Profiles, (6) Dogear, (7) Activities, and (8) Global Search components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-10-31T17:18:00.000Z Updated: 2024-08-07T10:31:27.545Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46215 http://secunia.com/advisories/32466 http://www.securityfocus.com/bid/31989 http://www-01.ibm.com/support/docview.wss?uid=swg27014008 https://exchange.xforce.ibmcloud.com/vulnerabilities/46211	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.