CVE-2006-4843

published 2007-03-29

CVE-2006-4843: Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—