# CVEs published 2010-09-20

19 CVEs were published on September 20, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7241](https://cve.now/CVE-2006-7241.md): The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is de (no CVSS)
- [CVE-2006-7242](https://cve.now/CVE-2006-7242.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrato (no CVSS)
- [CVE-2008-7261](https://cve.now/CVE-2008-7261.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user c (no CVSS)
- [CVE-2009-4998](https://cve.now/CVE-2009-4998.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, i (no CVSS)
- [CVE-2009-4999](https://cve.now/CVE-2009-4999.md): Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1- (no CVSS)
- [CVE-2009-5000](https://cve.now/CVE-2009-5000.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x (no CVSS)
- [CVE-2009-5001](https://cve.now/CVE-2009-5001.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-O (no CVSS)
- [CVE-2009-5002](https://cve.now/CVE-2009-5002.md): The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content F (no CVSS)
- [CVE-2010-3470](https://cve.now/CVE-2010-3470.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 be (no CVSS)
- [CVE-2010-3471](https://cve.now/CVE-2010-3471.md): Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-F (no CVSS)
- [CVE-2010-3472](https://cve.now/CVE-2010-3472.md): Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 be (no CVSS)
- [CVE-2010-3473](https://cve.now/CVE-2010-3473.md): Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows re (no CVSS)
- [CVE-2010-3474](https://cve.now/CVE-2010-3474.md): IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the function (no CVSS)
- [CVE-2010-3475](https://cve.now/CVE-2010-3475.md): IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remo (no CVSS)
- [CVE-2010-3476](https://cve.now/CVE-2010-3476.md): Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expression (no CVSS)
- [CVE-2010-2080](https://cve.now/CVE-2010-2080.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow rem (no CVSS)
- [CVE-2010-3072](https://cve.now/CVE-2010-3072.md): The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of (no CVSS)
- [CVE-2010-3200](https://cve.now/CVE-2010-3200.md): MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multip (no CVSS)
- [CVE-2010-3262](https://cve.now/CVE-2010-3262.md): Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HT (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.