Lucene search

IbmCVE-2013-5389

HistoryOct 22, 2013 - 10:55 p.m.

CVE-2013-5389

2013-10-2222:55:07

CWE-79

ibm

web.nvd.nist.gov

cve-2013-5389

xss

inotes

ibm domino 8.5.3

ibm domino 9.0

security vulnerability

web script

html

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

47.4%

JSON

Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.

Affected configurations

Nvd

Node

ibmlotus_dominoMatch8.5.3.0

ibmlotus_dominoMatch9.0.0.0

VendorProductVersionCPE
ibmlotus_domino8.5.3.0cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*
ibmlotus_domino9.0.0.0cpe:2.3:a:ibm:lotus_domino:9.0.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_domino	8.5.3.0	cpe:2.3:a:ibm:lotus_domino:8.5.3.0:::::::*
ibm	lotus_domino	9.0.0.0	cpe:2.3:a:ibm:lotus_domino:9.0.0.0:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg21653149

exchange.xforce.ibmcloud.com/vulnerabilities/87125

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

47.4%

JSON

Related for CVE-2013-5389