Unrated severityNVD Advisory· Published Nov 26, 2012· Updated Jun 16, 2026

CVE-2010-5282

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.

Affected products

Opentext/Livelink Ecm
cpe:2.3:a:opentext:livelink_ecm:9.7.1:*:*:*:*:*:*:*
Opentext/ECMllm-fuzzy
Range: =9.7.1

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.htmlnvdExploit
www.osvdb.org/68256nvdExploit
secunia.com/advisories/41553nvdVendor Advisory
packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txtnvd
www.osvdb.org/68257nvd
exchange.xforce.ibmcloud.com/vulnerabilities/62056nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000