CVE-2010-3890

Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the…

published November 12, 2010

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01073 · 64.6th percentile
Published
2010-11-12T20:00Z
EPSS history
Timeline
  • 12 NOV 20:00Z
    Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the…
    cvelistv5