PT-2008-3670 · Ibm · Ibm Lotus Quickr

Published 2008-05-13 · Updated 2017-08-08 · CVE-2008-2163

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr versions prior to 8.1 Hotfix 5 for Windows and AIX, and prior to 8.1 Hotfix 3 for i5/OS

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is specifically related to "WYSIWYG editors."

Recommendations For IBM Lotus Quickr 8.1 on Windows and AIX, apply Hotfix 5 or later. For IBM Lotus Quickr 8.1 on i5/OS, apply Hotfix 3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-2163

Affected Products

Ibm Lotus Quickr

References · 7

• http://secunia.com/advisories/30204 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2163 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg24018711 · Patch
• http://vupen.com/english/advisories/2008/1502/references · Note
• http://securityfocus.com/bid/29175 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42360 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg27013341 · Note