CVEvulnerability
CVE-2013-0595
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3.
Affected configurations
• ibm lotus domino 8.5.0
• ibm lotus domino 8.5.0.1
• ibm lotus domino 8.5.1
• ibm lotus domino 8.5.1.1
• ibm lotus domino 8.5.1.2
• ibm lotus domino 8.5.1.3
• ibm lotus domino 8.5.1.4
• ibm lotus domino 8.5.1.5
• ibm lotus domino 8.5.2.0
• ibm lotus domino 8.5.2.1
• ibm lotus domino 8.5.2.2
• ibm lotus domino 8.5.2.3
• ibm lotus domino 8.5.2.4
• ibm lotus domino 8.5.3.0
• ibm lotus domino 8.5.3.1
• ibm lotus domino 8.5.3.2
• ibm lotus domino 8.5.3.3
• ibm lotus domino 8.5.3.4
• ibm lotus inotes 8.5.0.0
• ibm lotus inotes 8.5.1.0
• ibm lotus inotes 8.5.2.0
• ibm lotus inotes 8.5.3.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21647740 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83431 exchange.xforce.ibmcloud.com
- https://www-01.ibm.com/support/docview.wss?uid=swg21671622 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21647740 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83431 exchange.xforce.ibmcloud.com
- https://www-01.ibm.com/support/docview.wss?uid=swg21671622 www-01.ibm.com