CVE-2010-0920

Published: Mar 3, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Affected (23)

Products: Ibm: Lotus Inotes

Ibm

1 product

Lotus Inotes

Configuration A

23 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Lotus Inotes	Up to 229.271
Ibm Lotus Inotes	Version 229.011
Ibm Lotus Inotes	Version 229.021
Ibm Lotus Inotes	Version 229.031
Ibm Lotus Inotes	Version 229.041
Ibm Lotus Inotes	Version 229.051
Ibm Lotus Inotes	Version 229.061
Ibm Lotus Inotes	Version 229.101
Ibm Lotus Inotes	Version 229.111
Ibm Lotus Inotes	Version 229.131
Ibm Lotus Inotes	Version 229.141
Ibm Lotus Inotes	Version 229.151
Ibm Lotus Inotes	Version 229.161
Ibm Lotus Inotes	Version 229.171
Ibm Lotus Inotes	Version 229.181
Ibm Lotus Inotes	Version 229.191
Ibm Lotus Inotes	Version 229.201
Ibm Lotus Inotes	Version 229.211
Ibm Lotus Inotes	Version 229.221
Ibm Lotus Inotes	Version 229.231
Ibm Lotus Inotes	Version 229.241
Ibm Lotus Inotes	Version 229.251
Ibm Lotus Inotes	Version 229.261