Cross site scripting

2016-11-2419:59:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.

CPENameOperatorVersion
lotus_inoteseq8.5.2.0
lotus_inoteseq8.5.1.4
lotus_inoteseq8.5.3.2
lotus_inoteseq8.5.2.3
lotus_inoteseq8.5.0.0
lotus_inoteseq8.5.3.6
lotus_inoteseq8.5.1.1
lotus_inoteseq8.5.3.3
lotus_inoteseq8.5.1.0
lotus_inoteseq8.5.2.1

Name	Operator	Version
lotus_inotes	eq	8.5.2.0
lotus_inotes	eq	8.5.1.4
lotus_inotes	eq	8.5.3.2
lotus_inotes	eq	8.5.2.3
lotus_inotes	eq	8.5.0.0
lotus_inotes	eq	8.5.3.6
lotus_inotes	eq	8.5.1.1
lotus_inotes	eq	8.5.3.3
lotus_inotes	eq	8.5.1.0
lotus_inotes	eq	8.5.2.1