CVE-2007-6295

Published: Dec 10, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.

Affected (1)

Products: Ibm: Lotus Sametime

Ibm

1 product

Lotus Sametime

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Sametime	Up to 8.0

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (14)

http://osvdb.org/39258

Source: cve@mitre.org

http://secunia.com/advisories/27941

Source: cve@mitre.org

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249

Source: cve@mitre.org

http://www.securityfocus.com/bid/26734

Source: cve@mitre.org

http://www.securitytracker.com/id?1019053

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4104

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38891

Source: cve@mitre.org

http://osvdb.org/39258