← Vulnerability feed

Vulnerability record · CVE-2010-0714 · published 26 February 2010

CVE-2010-0714: Ibm websphere portal cross-site scripting vulnerability

Ibm · Websphere Portal

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

4.3 CVSS 2.0 Medium EPSS 3.5% · top 11.2% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
3.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
14References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www-01.ibm.com/support/docview.wss?uid=swg21421469 PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233
http://www.hacktics.com/content/advisories/AdvIBM20100224.html Exploit
http://www.securityfocus.com/archive/1/509744/100/0/threaded
http://www.securityfocus.com/bid/38412 Exploit
http://www.securitytracker.com/id?1023660
https://exchange.xforce.ibmcloud.com/vulnerabilities/56508
http://www-01.ibm.com/support/docview.wss?uid=swg21421469 PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233
http://www.hacktics.com/content/advisories/AdvIBM20100224.html Exploit
http://www.securityfocus.com/archive/1/509744/100/0/threaded
http://www.securityfocus.com/bid/38412 Exploit
http://www.securitytracker.com/id?1023660
https://exchange.xforce.ibmcloud.com/vulnerabilities/56508

Track CVE-2010-0714 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-1505Ibm lotus quickr vulnerabilityUnspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and attack vectors, aka SPR ESEO8DQME2.EPSS 1.8%10.0CVE-2008-5675Ibm websphere portal permissions and access controls vulnerabilityUnspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuth…EPSS 1.5%9.3CVE-2012-2176Ibm lotus quickr memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote at…EPSS 32%8.8CVE-2017-1156Ibm websphere portal open redirect vulnerabilityIBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to …EPSS 1.1%8.8CVE-2016-2901Ibm websphere portal cross-site request forgery vulnerabilityCross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Man…EPSS 0.92%7.8CVE-2013-2951Ibm websphere portal vulnerabilityIBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which…EPSS 0.37%7.8CVE-2015-7419Ibm websphere portal vulnerabilityIBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted …EPSS 3.2%7.8CVE-2015-1943Ibm websphere portal vulnerabilityIBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 bef…EPSS 2.7%

Source: NIST National Vulnerability Database (record CVE-2010-0714), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.