CVE-2006-0662

Опубликовано: 13 фев. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser.

Ссылки

http://secunia.com/advisories/16340
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-38/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1015610
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919
http://www.osvdb.org/23077
http://www.securityfocus.com/bid/16577
http://www.vupen.com/english/advisories/2006/0499
https://exchange.xforce.ibmcloud.com/vulnerabilities/24612
http://secunia.com/advisories/16340
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-38/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1015610
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919
http://www.osvdb.org/23077
http://www.securityfocus.com/bid/16577
http://www.vupen.com/english/advisories/2006/0499
https://exchange.xforce.ibmcloud.com/vulnerabilities/24612

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:lotus_domino_inotes_client:6.5.4:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00544

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m544-jh4h-pp2p

github

почти 4 года назад