Unrated severityNVD Advisory· Published Feb 26, 2010· Updated Jun 16, 2026

CVE-2010-0714

Description

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Lotus Quickr6 versions
cpe:2.3:a:ibm:lotus_quickr:8.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ibm:lotus_quickr:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_quickr:8.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_quickr:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_quickr:8.1.1.1:*:*:*:*:*:*:*
- (no CPE)range: 8.0, 8.0.0.2, 8.1, 8.1.1, 8.1.1.1
IBM/Web Content Manager24 versions
cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.0:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:5.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_web_content_management:6.1.5.0:*:*:*:*:*:*:*
IBM/Lotus Workplace Web Content Management25 versions
cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.0:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:5.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.0.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_workplace_web_content_management:6.1.5.0:*:*:*:*:*:*:*
- (no CPE)range: 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, 6.1.5.0
IBM/Websphere Portal25 versions
cpe:2.3:a:ibm:websphere_portal:5.1.0.0:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:ibm:websphere_portal:5.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:5.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:5.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:5.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:5.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:5.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.0.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.hacktics.com/content/advisories/AdvIBM20100224.htmlnvdExploit
www.securityfocus.com/bid/38412nvdExploit
www-1.ibm.com/support/docview.wssnvd
www.securityfocus.com/archive/1/509744/100/0/threadednvd
www.securitytracker.com/idnvd
exchange.xforce.ibmcloud.com/vulnerabilities/56508nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000