Description
Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (4)
Core 4
Core References
Various Sources x_refsource_confirm
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3193
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1LO52324
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/63977
Scores
EPSS
0.0105
EPSS Percentile
60.8%
Details
CWE
CWE-79
Status
published
Products (9)
ibm/lotus_notes_traveler
8.0
ibm/lotus_notes_traveler
8.0.1
ibm/lotus_notes_traveler
8.0.1.2
ibm/lotus_notes_traveler
8.0.1.3
ibm/lotus_notes_traveler
8.5.0.0
ibm/lotus_notes_traveler
8.5.0.1
ibm/lotus_notes_traveler
8.5.0.2
ibm/lotus_notes_traveler
8.5.1.1
ibm/lotus_notes_traveler
< 8.5.1.2
Published
Dec 16, 2010
Tracked Since
Feb 18, 2026