Cross-Site Scripting Vulnerability in IBM iNotes
CVE-2016-2939
6.1MEDIUM
Summary
IBM iNotes is susceptible to cross-site scripting attacks, allowing attackers to inject malicious JavaScript code into the web application. This can significantly alter the functionality of the user interface, potentially leading to unauthorized access to user credentials even within a trusted session. Proper input validation and output sanitization measures are essential to mitigate this risk.
Affected Version(s)
Domino 8.5.3.5
Domino 8.5.3.6
Domino 9.0.1
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved