$ cve CVE-2010-0714 JSON

CVE-2010-0714 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 3.5% (pctl 89)

Patch early

A public exploit exists.

Description

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	3.52% — more likely to be exploited than 89% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2010-02-26
Last modified	2026-06-16

Affected (4)

Vendor	Product
ibm	lotus quickr
ibm	lotus web content management
ibm	lotus workplace web content management
ibm	websphere portal

Public exploits

Source	Title	Date
exploit-db	IBM (Multiple Products) - Login Page Cross-Site Scripting	2010-02-25

References

→ the Explorer · watch your stack · NVD