CVEvulnerability

CVE-2007-1941

4.3 MEDIUM Published 2007-04-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-04-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.

Affected configurations

• ibm lotus notes 6.5.5 • ibm lotus notes 7.0 • ibm lotus notes 7.0.1

References

http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21247201 Vendor Advisory
http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt www.intrinsec.com
http://www.securityfocus.com/bid/23421 www.securityfocus.com
http://www.securitytracker.com/id?1017870 Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21247201 Vendor Advisory
http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt www.intrinsec.com
http://www.securityfocus.com/bid/23421 www.securityfocus.com
http://www.securitytracker.com/id?1017870 Vendor Advisory