CVE-2010-2279

EPSS 0.48%
Published 15.06.2010 14:30:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Lotus Connections Version2.5.0

Ibm ≫ Lotus Connections Version2.5.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.48%	0.624

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.6	4.9	10	AV:N/AC:H/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/40007

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21431472

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1281

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325

https://nvd.nist.gov/vuln/detail/CVE-2010-2279

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2279

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2279

EUVD