Lucene search
HistoryMay 01, 2013 - 12:00 p.m.
CVE-2013-0538
ibm
lotus notes
xss
vulnerability
email security
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.3%
Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49.
Related
prion
prion
Cross site scripting
2013-05-01 12:00:00
cvelist
cvelist
CVE-2013-0538
2013-05-01 10:00:00
cert
cert
IBM Notes runs arbitrary JAVA and Javascript in emails
2013-05-01 00:00:00
nessus
nessus
IBM Notes Accepts JavaScript Tags Inside HTML Emails
2013-05-28 00:00:00
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.3%
Related for CVE-2013-0538