CVE-2013-4063

EUVD-2013-3994
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
Affected Products (NVD)
VendorProductVersion
ibmlotus_domino
8.5.3.0
ibmlotus_domino
8.5.3.1
ibmlotus_domino
8.5.3.2
ibmlotus_domino
8.5.3.3
ibmlotus_domino
8.5.3.4
ibmlotus_domino
8.5.3.5
ibmlotus_domino
9.0.0.0
ibmlotus_inotes
8.5.3.0
ibmlotus_inotes
8.5.3.1
ibmlotus_inotes
8.5.3.2
ibmlotus_inotes
8.5.3.3
ibmlotus_inotes
8.5.3.4
ibmlotus_inotes
8.5.3.5
ibmlotus_inotes
9.0.0.0
𝑥
= Vulnerable software versions