Vulnerability Details CVE-2013-4065
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.5%
CVSS Severity
CVSS v2 Score 2.6
References
Products affected by CVE-2013-4065
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.0
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.1
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.2
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.3
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.4
-
cpe:2.3:a:ibm:lotus_domino:8.5.3.5
-
cpe:2.3:a:ibm:lotus_domino:9.0.0.0
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.0
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.1
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.2
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.3
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.4
-
cpe:2.3:a:ibm:lotus_inotes:8.5.3.5
-
cpe:2.3:a:ibm:lotus_inotes:9.0.0.0