CVE-2012-4848: IBM Lotus Foundations Start

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.

Affected products

• IBM Lotus Foundations Start: up to and including 1.2.2; version 1.0 only; version 1.1 only; version 1.2 only

Published 2012-12-19. Last modified 2026-06-16.