CVE-2008-0769

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.06%

Published

Feb 14, 2008

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input.

Weaknesses (CWE)

CWE-79

Affected Products (8)

opentext · livelink_ecmvulnerable

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html

http://secunia.com/advisories/28723

http://withdk.com/archives/livelink-utf7-xss-advisory.pdf

http://www.securityfocus.com/bid/27537

https://exchange.xforce.ibmcloud.com/vulnerabilities/40123

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html

http://secunia.com/advisories/28723

http://withdk.com/archives/livelink-utf7-xss-advisory.pdf

http://www.securityfocus.com/bid/27537

https://exchange.xforce.ibmcloud.com/vulnerabilities/40123

KEV Catalog EPSS Scores Vendors All CVEs