CVE

Id
35345  
CVE No.
CVE-2008-5228  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."  
Phase
Assigned (20081125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
387333 35345 CVE-2008-5228 AIXAPAR:PK73108  View
387334 35345 CVE-2008-5228 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108  View
387335 35345 CVE-2008-5228 AIXAPAR:PK73933  View
387336 35345 CVE-2008-5228 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933  View
387337 35345 CVE-2008-5228 BID:32408  View
387338 35345 CVE-2008-5228 URL:http://www.securityfocus.com/bid/32408  View
387339 35345 CVE-2008-5228 VUPEN:ADV-2008-3234  View
387340 35345 CVE-2008-5228 URL:http://www.vupen.com/english/advisories/2008/3234  View
387341 35345 CVE-2008-5228 SECUNIA:32763  View
387342 35345 CVE-2008-5228 URL:http://secunia.com/advisories/32763  View
387343 35345 CVE-2008-5228 XF:ibm-lotus-workplace-navigation-xss(46749)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49793 JVNDB-2008-005103 Microsoft Windows NT サーバなどの Windows Media Services におけるバッファオーバーフローの脆弱性 Microsoft Windows NT、2000、および Avaya Media and Message Application サーバ上で稼働する nskey.dll にある Windows Media Services ActiveX コントロールの CallHTMLHelp メソッドには、バッファオーバーフローの脆弱性が存在します。 CVE-2008-5232 35345 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005103.html  View