CVE-2013-0525

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
1.5LOW
EPSS
0.1%
top 75.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Inotes
Timeline
PublishedMar 26
Latest updateMay 5

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX.

CVSS vector

AV:L/AC:M/C:N/I:P/A:NExploitability: 2.7 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/lotus_inotes15 versions+14

🔴Vulnerability Details

2
GHSA
GHSA-3hg2-x35c-4rx4: Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8↗2022-05-05
▶
CVEList
CVE-2013-0525: Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8↗2013-03-26
▶
CVE-2013-0525 (LOW CVSS 1.5) | Multiple cross-site scripting (XSS) | cvebase.io