Description
Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/83270
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/912420
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21633819
Scores
EPSS
0.0212
EPSS Percentile
80.0%
Details
CWE
CWE-79
Status
published
Products (30)
ibm/lotus_notes
8.0
ibm/lotus_notes
8.0.0
ibm/lotus_notes
8.0.1
ibm/lotus_notes
8.0.2
ibm/lotus_notes
8.0.2.0
ibm/lotus_notes
8.0.2.1
ibm/lotus_notes
8.0.2.2
ibm/lotus_notes
8.0.2.3
ibm/lotus_notes
8.0.2.4
ibm/lotus_notes
8.0.2.5
... and 20 more
Published
May 01, 2013
Tracked Since
Feb 18, 2026