{"id":"CVE-2010-2279","aliases":["EUVD-2010-2289","GHSA-r5g6-h9r4-8fp4"],"status":"published","title":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2...","description":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when \"forced SSL\" is enabled, uses http for links, which has unspecified impact and remote attack vectors.","severity":{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01265,"percentile":0.69918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2010-06-14T19:00:00Z","modified":"2026-06-16T23:20:27Z","products":[{"vendor":"ibm","product":"lotus_connections"}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/1281","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40007","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21431472","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2279"},{"url":"https://github.com/advisories/GHSA-r5g6-h9r4-8fp4"}],"sources":{"cve":[{"id":"CVE-2010-2279","description":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when \"forced SSL\" is enabled, uses http for links, which has unspecified impact and remote attack vectors.","status":"published","published":"2010-06-14T19:00:00Z","modified":"2024-09-16T18:17:49.445Z","updated_at":"2026-11-02T14:33:27.354104Z"}],"euvd":[{"id":"EUVD-2010-2289","description":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when \"forced SSL\" is enabled, uses http for links, which has unspecified impact and remote attack vectors.","status":"published","published":"2010-06-14T19:00:00Z","modified":"2024-09-16T18:17:49Z","updated_at":"2026-11-03T00:55:33.878386Z"}],"ghsa":[{"id":"GHSA-r5g6-h9r4-8fp4","title":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2...","description":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when \"forced SSL\" is enabled, uses http for links, which has unspecified impact and remote attack vectors.","status":"published","published":"2022-05-17T05:50:14Z","modified":"2023-01-28T05:04:40Z","updated_at":"2026-11-02T14:44:13.169568Z"}],"nvd":[{"id":"CVE-2010-2279","description":"The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when \"forced SSL\" is enabled, uses http for links, which has unspecified impact and remote attack vectors.","status":"published","published":"2010-06-15T14:30:01.67Z","modified":"2026-06-16T23:20:27.17Z","cvss":[{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:47.724369Z"}]}}