CVE-2013-0525

IBM iNotes <8.5.x - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX.

References (2)

[Various Sources] http://www-01.ibm.com/support/docview.wss?uid=swg21628658

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/82542

Scores

EPSS 0.0009

EPSS Percentile 24.7%

Details

CWE

CWE-79

Status published

Products (16)

ibm/lotus_inotes

... and 6 more

Published Mar 26, 2013

Tracked Since Feb 18, 2026