Cross site scripting

2017-03-3118:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998824.

CPENameOperatorVersion
inoteseq8.5.3.4
inoteseq8.5.0.0
inoteseq8.5.3.1
inoteseq8.5.3.2
inoteseq8.5.1.2
inoteseq8.5.2.2
inoteseq8.5.1.1
inoteseq9.0.1.2
inoteseq8.5.1.4
inoteseq8.5.1.3

Name	Operator	Version
inotes	eq	8.5.3.4
inotes	eq	8.5.0.0
inotes	eq	8.5.3.1
inotes	eq	8.5.3.2
inotes	eq	8.5.1.2
inotes	eq	8.5.2.2
inotes	eq	8.5.1.1
inotes	eq	9.0.1.2
inotes	eq	8.5.1.4
inotes	eq	8.5.1.3