Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2012-4846

IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.2%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2012-4846
  • Ibm » Lotus Notes » Version: 8.5.0.0
    cpe:2.3:a:ibm:lotus_notes:8.5.0.0
  • Ibm » Lotus Notes » Version: 8.5.0.1
    cpe:2.3:a:ibm:lotus_notes:8.5.0.1
  • Ibm » Lotus Notes » Version: 8.5.1
    cpe:2.3:a:ibm:lotus_notes:8.5.1
  • Ibm » Lotus Notes » Version: 8.5.1.0
    cpe:2.3:a:ibm:lotus_notes:8.5.1.0
  • Ibm » Lotus Notes » Version: 8.5.1.1
    cpe:2.3:a:ibm:lotus_notes:8.5.1.1
  • Ibm » Lotus Notes » Version: 8.5.1.2
    cpe:2.3:a:ibm:lotus_notes:8.5.1.2
  • Ibm » Lotus Notes » Version: 8.5.1.3
    cpe:2.3:a:ibm:lotus_notes:8.5.1.3
  • Ibm » Lotus Notes » Version: 8.5.1.4
    cpe:2.3:a:ibm:lotus_notes:8.5.1.4
  • Ibm » Lotus Notes » Version: 8.5.1.5
    cpe:2.3:a:ibm:lotus_notes:8.5.1.5
  • Ibm » Lotus Notes » Version: 8.5.2.0
    cpe:2.3:a:ibm:lotus_notes:8.5.2.0
  • Ibm » Lotus Notes » Version: 8.5.2.1
    cpe:2.3:a:ibm:lotus_notes:8.5.2.1
  • Ibm » Lotus Notes » Version: 8.5.2.2
    cpe:2.3:a:ibm:lotus_notes:8.5.2.2
  • Ibm » Lotus Notes » Version: 8.5.2.3
    cpe:2.3:a:ibm:lotus_notes:8.5.2.3
  • Ibm » Lotus Notes » Version: 8.5.3
    cpe:2.3:a:ibm:lotus_notes:8.5.3
  • Ibm » Lotus Notes » Version: 8.5.3.1
    cpe:2.3:a:ibm:lotus_notes:8.5.3.1
  • Ibm » Lotus Notes » Version: 8.5.3.2
    cpe:2.3:a:ibm:lotus_notes:8.5.3.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved