CVEvulnerability
CVE-2009-3105
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC.
Affected configurations
• ibm domino web access 8.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/36626 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27016745 Vendor Advisory
- http://www.securityfocus.com/bid/36292 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2557 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53086 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/36626 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27016745 Vendor Advisory
- http://www.securityfocus.com/bid/36292 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2557 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53086 exchange.xforce.ibmcloud.com