cbcvebase.
CVE-2012-4846
published 2012-12-19

CVE-2012-4846: IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote…

PriorityP415medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.19%
64.3th percentile
IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.

Affected

16 ranges
VendorProductVersion rangeFixed in
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.