CVE-2012-4825 in Lotus Notes Traveler

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2012-09-06

Divulgación

2012-10-08

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
6589	IBM Lotus Notes Traveler ILNT.mobileconfig secuencias de comandos en sitios cruzados	79	Prueba de concepto	Arreglo oficial	CVE-2012-4825

Fuentes

• MITRE
• NVD
• CVE Details