CVE-2010-5282: opentext livelink_ecm Cross-site Scripting
Vulnerability summary
CVE-2010-5282 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in opentext livelink_ecm. EPSS estimates a 1.33% chance of exploitation in the next 30 days, higher than 70.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 26-11-2012PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.33%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
0.00 pp
From 1.33% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (archives.neohapsis.com)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Opentext1 product
- livelink_ecm9.7.1
1 vendor · 1 product
References
6 links- packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txtX Refsource MISC
- archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.htmlMailing ListX Refsource FULLDISCExploit