CVE-2006-4843

IBM Lotus Domino - Cross-Site Scripting via Active Content Filter Bypass

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33280
Vendor Advisory third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=493
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017824
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23173
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21257026
Exploit, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24633
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1133

Scores

EPSS 0.0135
EPSS Percentile 68.7%

Details

Status published
Products (9)
ibm/lotus_domino 6.5.0
ibm/lotus_domino 6.5.1
ibm/lotus_domino 6.5.2
ibm/lotus_domino 6.5.3
ibm/lotus_domino 6.5.4 (3 CPE variants)
ibm/lotus_domino 6.5.5 (3 CPE variants)
ibm/lotus_domino 7.0
ibm/lotus_domino 7.0.1
ibm/lotus_domino 7.0.2
Published Mar 29, 2007
Tracked Since Feb 18, 2026