CVE-2007-1941

IBM Lotus Notes - Cross-Site Scripting via Multipart/Related Email Message

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017870
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23421
Various Sources x_refsource_misc
http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt

Scores

EPSS 0.0105
EPSS Percentile 60.9%

Details

Status published
Products (3)
ibm/lotus_notes 6.5.5
ibm/lotus_notes 7.0
ibm/lotus_notes 7.0.1
Published Apr 11, 2007
Tracked Since Feb 18, 2026