CVE-2010-2277

no score yetEPSS 1.2%

ibm lotus connections: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-06-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_connections

References

http://secunia.com/advisories/40007
http://www-01.ibm.com/support/docview.wss?uid=swg21431472
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921

Check your stack JSON