Cross-Site Scripting Vulnerability in IBM iNotes
CVE-2016-2939

6.1MEDIUM

Key Information:

Status
Vendor
CVE Published:
1 February 2017

Summary

IBM iNotes is susceptible to cross-site scripting attacks, allowing attackers to inject malicious JavaScript code into the web application. This can significantly alter the functionality of the user interface, potentially leading to unauthorized access to user credentials even within a trusted session. Proper input validation and output sanitization measures are essential to mitigate this risk.

Affected Version(s)

Domino 8.5.3.5

Domino 8.5.3.6

Domino 9.0.1

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.