CVE-2012-4848 | BDVDB-2026-53847 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ibm.com/support/docview.wss?uid=swg21620319
https://exchange.xforce.ibmcloud.com/vulnerabilities/79537

Exploit#

No public exploit known

History#

Version 12012-12-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.