CVE-2014-0913

IBM Lotus Domino and iNotes - Cross-Site Scripting via Email Message

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030215
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21671981
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91880

Scores

EPSS 0.0179
EPSS Percentile 76.1%

Details

CWE
CWE-79
Status published
Products (4)
ibm/lotus_domino 8.5.3.6
ibm/lotus_domino 9.0.1.0
ibm/lotus_inotes 8.5.3.6
ibm/lotus_inotes 9.0.1.0
Published May 09, 2014
Tracked Since Feb 18, 2026