CVE-2012-5943 in Lotus iNotes

Resumen

por MITRE

Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2012-11-21
• Divulgación: 2013-03-26
• Moderación: aceptado
• Artículo: VDB-8079
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00931
• KEV: no
• Actividades: muy bajo
• Sector: Education, Industry, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-5943
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-5943
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-5943/