CVE-2007-5924

IBM Lotus Domino < 6.5.6 FP2 and 7.x < 7.0.2 FP2 - Authenticated Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/jp/JVN%2384565055/index.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/39720
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg27010980
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21263871
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27509
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3700

Scores

EPSS 0.0122
EPSS Percentile 65.6%

Details

CWE
CWE-79
Status published
Products (3)
ibm/lotus_domino 7.0
ibm/lotus_domino 7.0.2 (2 CPE variants)
ibm/lotus_domino < 6.5.6
Published Nov 10, 2007
Tracked Since Feb 18, 2026