CVE-2012-4825 in Lotus Notes Traveler

Sumário (Inglês)

Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

06/09/2012

Divulgação

08/10/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
6589	IBM Lotus Notes Traveler ILNT.mobileconfig Script de Site Cruzado	79	Prova de conceito	Correção oficial	CVE-2012-4825

Fontes

• MITRE
• NVD
• CVE Details