GCVE - cpe:2.3:a:ibm:lotus_connections:2.5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_connections:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Connections (`f770c870-80a9-5319-9b9c-940323978de5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2280`	vulnerable	2026-06-08 04:55:06.488554	Details available Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-16T19:15:41.061Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://secunia.com/advisories/40007 http://www-01.ibm.com/support/docview.wss?uid=swg21431472	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2279`	vulnerable	2026-06-08 04:55:06.488021	Details available The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-16T18:17:49.445Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://secunia.com/advisories/40007 http://www-01.ibm.com/support/docview.wss?uid=swg21431472 http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2278`	vulnerable	2026-06-08 04:55:06.487540	Details available The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-16T20:16:35.176Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47496 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47642 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47669 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47610	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2277`	vulnerable	2026-06-08 04:55:06.485877	Details available Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-17T02:21:33.517Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214 http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362 http://secunia.com/advisories/40007	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.