IBM Lotus Connections 2.5.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:lotus_connections:2.5.0.1:*:*:*:*:*:*:*
part: a version: 2.5.0.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Lotus Connections (f770c870-80a9-5319-9b9c-940323978de5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0503 |
vulnerable | 2026-06-08 05:03:48.384130 |
Details available
Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-04-23T10:00:00.000Z
Updated: 2024-08-06T14:25:10.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2280 |
vulnerable | 2026-06-08 04:55:06.488652 |
Details available
Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH.
Published: 2010-06-14T19:00:00.000Z
Updated: 2024-09-16T19:15:41.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2279 |
vulnerable | 2026-06-08 04:55:06.488124 |
Details available
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
Published: 2010-06-14T19:00:00.000Z
Updated: 2024-09-16T18:17:49.445Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2278 |
vulnerable | 2026-06-08 04:55:06.487663 |
Details available
The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
Published: 2010-06-14T19:00:00.000Z
Updated: 2024-09-16T20:16:35.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2277 |
vulnerable | 2026-06-08 04:55:06.486757 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.
Published: 2010-06-14T19:00:00.000Z
Updated: 2024-09-17T02:21:33.517Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.