CVE-2010-2279: IBM Lotus Connections

High severity, CVSS 7.6. EPSS: 1.3% chance of exploitation in the next 30 days.

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

Affected products

• IBM Lotus Connections: version 2.5.0 only; version 2.5.0.1 only

Published 2010-06-15. Last modified 2026-06-16.