CVE-2010-2279

EPSS 0.48%
Veröffentlicht 15.06.2010 14:30:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Lotus Connections Version2.5.0

Ibm ≫ Lotus Connections Version2.5.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.48%	0.624

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.6	4.9	10	AV:N/AC:H/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/40007

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21431472

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1281

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325

https://nvd.nist.gov/vuln/detail/CVE-2010-2279

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2279

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2279

EUVD