VULNERABILITY INTELLIGENCE

CVE-2009-3816

CVSS score4.3 MEDIUM

EPSS probability1.02%

CISA KEVNot currently listed

Published2009-10-28

Last modified2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.