# CVEs published 2010-09-20

19 CVEs were published on September 20, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7241](https://cve.now/CVE-2006-7241.md): The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is… (no CVSS)
- [CVE-2006-7242](https://cve.now/CVE-2006-7242.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE… (no CVSS)
- [CVE-2008-7261](https://cve.now/CVE-2008-7261.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user… (no CVSS)
- [CVE-2009-4998](https://cve.now/CVE-2009-4998.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007… (no CVSS)
- [CVE-2009-4999](https://cve.now/CVE-2009-4999.md): Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before… (no CVSS)
- [CVE-2009-5000](https://cve.now/CVE-2009-5000.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE)… (no CVSS)
- [CVE-2009-5001](https://cve.now/CVE-2009-5001.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's… (no CVSS)
- [CVE-2009-5002](https://cve.now/CVE-2009-5002.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content… (no CVSS)
- [CVE-2010-3470](https://cve.now/CVE-2010-3470.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1… (no CVSS)
- [CVE-2010-3471](https://cve.now/CVE-2010-3471.md): Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before… (no CVSS)
- [CVE-2010-3472](https://cve.now/CVE-2010-3472.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1… (no CVSS)
- [CVE-2010-3473](https://cve.now/CVE-2010-3473.md): Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows… (no CVSS)
- [CVE-2010-3474](https://cve.now/CVE-2010-3474.md): IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the… (no CVSS)
- [CVE-2010-3475](https://cve.now/CVE-2010-3475.md): IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows… (no CVSS)
- [CVE-2010-3476](https://cve.now/CVE-2010-3476.md): Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular… (no CVSS)
- [CVE-2010-2080](https://cve.now/CVE-2010-2080.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow… (no CVSS)
- [CVE-2010-3072](https://cve.now/CVE-2010-3072.md): The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial… (no CVSS)
- [CVE-2010-3200](https://cve.now/CVE-2010-3200.md): MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and… (no CVSS)
- [CVE-2010-3262](https://cve.now/CVE-2010-3262.md): Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.