VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 1, 2011· Updated Apr 29, 2026

CVE-2011-1106

CVE-2011-1106

Description

Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.

Affected products

3
  • IBM/Lotus Sametime3 versions
    cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_sametime:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.