CVE ID:	CVE-2010-0714
Description:	Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.
Test IDs:	1.3.6.1.4.1.25623.1.0.100538
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0714 AIX APAR: PM03233 http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233 BugTraq ID: 38412 http://www.securityfocus.com/bid/38412 Bugtraq: 20100225 Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM (Google Search) http://www.securityfocus.com/archive/1/509744/100/0/threaded http://www.hacktics.com/content/advisories/AdvIBM20100224.html http://www.securitytracker.com/id?1023660 XForce ISS Database: ibm-login-xss(56508) https://exchange.xforce.ibmcloud.com/vulnerabilities/56508