CVE-2013-5389 — Cross-site Scripting in IBM Lotus Domino

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 53.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedOct 22
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/lotus_domino8.5.3.0, 9.0.0.0+1

🔴Vulnerability Details

2
GHSA
GHSA-8mfg-rc8p-w425: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8↗2022-05-17
▶
CVEList
CVE-2013-5389: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8↗2013-10-22
▶
CVE-2013-5389 — Cross-site Scripting in IBM | cvebase