Lucene search
+L

410 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/13 12:00 a.m.•3 views

CVE-2017-1421: Improper Neutralization of Input During Web Page Generation

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS6.2AI score0.01054EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/08/07 12:00 a.m.•42 views

IBM iNotes Cross-Site Scripting Vulnerability-02 (Aug 2017)

IBM iNotes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino"...

6.1CVSS6AI score0.00966EPSS
SaveExploits0References2
OSV
OSV
•added 2017/08/03 3:29 p.m.•13 views

CVE-2017-1327

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062...

6.1CVSS5.4AI score0.00966EPSS
SaveExploits0References3
Prion
Prion
•added 2017/08/03 3:29 p.m.•21 views

Cross site scripting

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062...

4.3CVSS5.7AI score0.00966EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/08/03 3:29 p.m.•26 views

CVE-2017-1327

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062...

6.1CVSS5.8AI score0.00966EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/08/03 3:00 p.m.•39 views

CVE-2017-1327

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062...

5.8AI score0.00966EPSS
SaveExploits0References3
CVE
CVE
•added 2017/08/03 3:00 p.m.•72 views

CVE-2017-1327

IBM iNotes versions 8.5 and 9.0 are affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue allows an attacker to embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Connected documents corroborate ...

6.1CVSS5.8AI score0.00966EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/03 12:00 a.m.•6 views

CVE-2017-1327: Improper Neutralization of Input During Web Page Generation

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062...

6.1CVSS5.7AI score0.00966EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/08/02 12:00 a.m.•30 views

IBM iNotes Cross-Site Scripting Vulnerability (Aug 2017)

IBM iNotes is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

6.1CVSS6AI score0.00977EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/01 12:00 a.m.•9 views

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-21250)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

6.1CVSS6.3AI score0.00977EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/31 9:29 p.m.•24 views

Cross site scripting

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234...

4.3CVSS5.7AI score0.00977EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/07/31 9:29 p.m.•28 views

CVE-2017-1332

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234...

6.1CVSS5.8AI score0.00977EPSS
SaveExploits0References3
OSV
OSV
•added 2017/07/31 9:29 p.m.•13 views

CVE-2017-1332

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234...

6.1CVSS5.4AI score0.00977EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/07/31 9:00 p.m.•38 views

CVE-2017-1332

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234...

5.8AI score0.00977EPSS
SaveExploits0References3
CVE
CVE
•added 2017/07/31 9:00 p.m.•74 views

CVE-2017-1332

CVE-2017-1332 affects IBM iNotes 8.5 and 9.0, where a cross-site scripting flaw in the Web UI can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Public data shows CVSS scores (NVD) of 6.1 (CVSS3.0) and 4.3 (CVSS2.0); explo...

6.1CVSS5.8AI score0.00977EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/31 12:00 a.m.•5 views

CVE-2017-1332: Improper Neutralization of Input During Web Page Generation

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234...

6.1CVSS5.7AI score0.00977EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/06/21 12:00 a.m.•55 views

IBM iNotes SVG Keylogger Information Disclosure Vulnerability (Jun 2017)

IBM iNotes is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

5.7CVSS5.4AI score0.01296EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/06/15 12:00 a.m.•11 views

IBM iNotes Information Disclosure Vulnerability

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A security vulnerability exists in IBM iNotes...

5.7CVSS6.4AI score0.01296EPSS
SaveExploits0References1
Prion
Prion
•added 2017/06/12 7:29 p.m.•22 views

Information disclosure

IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854...

3.5CVSS5.2AI score0.01296EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/06/12 7:29 p.m.•31 views

CVE-2017-1214

IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854...

5.7CVSS5.2AI score0.01296EPSS
SaveExploits0References3
Rows per page
Query Builder