Lucene search
HistoryMar 29, 2007 - 9:19 p.m.
CVE-2006-4843
ibm
lotus
domino
xss
vulnerability
security
nvd
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.183 Low
EPSS
Percentile
96.1%
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified “code sequences” that bypass the protection scheme.
References
Related
securityvulns
securityvulns
prion
prion
Design/Logic Flaw
2007-03-28 22:19:00
Cross site scripting
2007-04-11 01:19:00
cve
cve
CVE-2007-1740
2007-03-28 22:19:00
CVE-2007-1941
2007-04-11 01:19:00
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.183 Low
EPSS
Percentile
96.1%
Related for CVE-2006-4843