Lucene search
MitreCVE-2012-5307HistoryOct 08, 2012 - 10:47 a.m.
CVE-2012-5307
2012-10-0810:47:45
CWE-79
mitre
web.nvd.nist.gov
34
cve-2012-5307
cross-site scripting
xss
ibm lotus notes traveler
security vulnerability
web script injection
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
48.4%
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.
Affected configurations
Node
ibmlotus_notes_travelerRange≤8.5.3.3
ORibmlotus_notes_travelerMatch8.5.0.0
ORibmlotus_notes_travelerMatch8.5.0.1
ORibmlotus_notes_travelerMatch8.5.0.2
ORibmlotus_notes_travelerMatch8.5.1.1
ORibmlotus_notes_travelerMatch8.5.1.2
ORibmlotus_notes_travelerMatch8.5.1.3
ORibmlotus_notes_travelerMatch8.5.2.1
ORibmlotus_notes_travelerMatch8.5.3
ORibmlotus_notes_travelerMatch8.5.3.1
ORibmlotus_notes_travelerMatch8.5.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_notes_traveler | * | cpe:2.3:a:ibm:lotus_notes_traveler:*:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.0.0 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.0.1 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.0.2 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.1.1 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.1:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.1.2 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.2:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.1.3 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.3:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.2.1 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.2.1:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.3 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3:*:*:*:*:*:*:* |
| ibm | lotus_notes_traveler | 8.5.3.1 | cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.1:*:*:*:*:*:*:* |
Related
nvd
nvd
prion
prion
Cross site scripting
2012-10-08 10:47:00
Cross site scripting
2012-10-08 10:47:00
Open redirect
2012-10-08 10:47:00
cvelist
cvelist
securityvulns
securityvulns
IBM Lotus Notes Traveler security vulnerabilities
2012-10-22 00:00:00
cve
cve
CVE-2012-4825
2012-10-08 10:47:45
CVE-2012-4824
2012-10-08 10:47:45
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
48.4%
Related for CVE-2012-5307