CVE-2012-4848 in IBM Lotus Foundations Start
Zusammenfassung (Englisch)
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.
Reservieren
06.09.2012
Veröffentlichung
19.12.2012
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 7190 | IBM Lotus Foundations Start Cross Site Scripting | 79 | High | Offizieller Fix | CVE-2012-4848 |