CVE-2014-0913

Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:lotus_domino:8.5.3.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:9.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:9.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:8.5.3.6:*:*:*:*:*:*:*

Information

Published : 2014-05-08 18:55

Updated : 2017-08-28 18:34


NVD link : CVE-2014-0913

Mitre link : CVE-2014-0913


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

ibm

  • lotus_domino
  • lotus_inotes