Multiple vulnerabilities have been identified in IBM Lotus Connections, which could be exploited by attackers to bypass security restrictions or gain knowledge of sensitive information. These issues are caused by input validation and design errors in the Dojo, Community, Homepage, Bookmarks and Blogs components, and other unspecified modules when processing user-supplied data or when connecting to certain web sites, which could allow information disclosure, or cross site scripting and phishing attacks.
