CVE-2011-3576

IBM Lotus Domino 8.5.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf.

References (2)

Scores

EPSS 0.0020
EPSS Percentile 42.1%

Classification

CWE
CWE-79
Status published

Affected Products (2)

ibm/lotus_domino
n/a/n/a

Timeline

Published Sep 19, 2011
Tracked Since Feb 18, 2026