Lucene search

K
cve[email protected]CVE-2012-5307
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5307

2022-10-0316:15:30
CWE-79
web.nvd.nist.gov
30
cve-2012-5307
cross-site scripting
xss
ibm lotus notes traveler
security vulnerability
web script injection

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.

Affected configurations

NVD
Node
ibmlotus_notes_travelerRange8.5.3.3
OR
ibmlotus_notes_travelerMatch8.5.0.0
OR
ibmlotus_notes_travelerMatch8.5.0.1
OR
ibmlotus_notes_travelerMatch8.5.0.2
OR
ibmlotus_notes_travelerMatch8.5.1.1
OR
ibmlotus_notes_travelerMatch8.5.1.2
OR
ibmlotus_notes_travelerMatch8.5.1.3
OR
ibmlotus_notes_travelerMatch8.5.2.1
OR
ibmlotus_notes_travelerMatch8.5.3
OR
ibmlotus_notes_travelerMatch8.5.3.1
OR
ibmlotus_notes_travelerMatch8.5.3.2

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

Related for CVE-2012-5307