Cross-Site Scripting Vulnerability in IBM iNotes
CVE-2016-2939

6.1MEDIUM

Key Information:

Vendor
IBM Corporation
Status
Domino
Vendor
CVE Published:
1 February 2017

Summary

IBM iNotes is susceptible to cross-site scripting attacks, allowing attackers to inject malicious JavaScript code into the web application. This can significantly alter the functionality of the user interface, potentially leading to unauthorized access to user credentials even within a trusted session. Proper input validation and output sanitization measures are essential to mitigate this risk.

Affected Version(s)

Domino 8.5.3.5

Domino 8.5.3.6

Domino 9.0.1

References

http://www.securityfocus.com/bid/94605
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1037383
vdb-entryx_refsource_SECTRACK
http://www.ibm.com/support/docview.wss?uid=swg21992835
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.