XSS in IBM Webi
CVE-2010-1242
Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (61.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Webi — versions 1.0.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2010-1242?
- CVE-2010-1242 is a vulnerability in IBM Webi, classified under Cross-site Scripting. Published 2010-04-05.
- Is CVE-2010-1242 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.