CVE-2007-1941

Опубликовано: 11 апр. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.

Ссылки

http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21247201
Vendor Advisory
http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt
http://www.securityfocus.com/bid/23421
http://www.securitytracker.com/id?1017870
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21247201
Vendor Advisory
http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt
http://www.securityfocus.com/bid/23421
http://www.securitytracker.com/id?1017870
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.01054

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2jgm-5m9j-5j8j

github

около 4 лет назад