CVE-2013-4064
21.12.2013, 14:22
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.
| Vendor | Product | Version |
|---|---|---|
| ibm | lotus_domino | 8.5.3.0 |
| ibm | lotus_domino | 8.5.3.1 |
| ibm | lotus_domino | 8.5.3.2 |
| ibm | lotus_domino | 8.5.3.3 |
| ibm | lotus_domino | 8.5.3.4 |
| ibm | lotus_domino | 8.5.3.5 |
| ibm | lotus_domino | 9.0.0.0 |
| ibm | lotus_inotes | 8.5.3.0 |
| ibm | lotus_inotes | 8.5.3.1 |
| ibm | lotus_inotes | 8.5.3.2 |
| ibm | lotus_inotes | 8.5.3.3 |
| ibm | lotus_inotes | 8.5.3.4 |
| ibm | lotus_inotes | 8.5.3.5 |
| ibm | lotus_inotes | 9.0.0.0 |
𝑥
= Vulnerable software versions