PT-2007-1173 · Ibm · Ibm Lotus Domino

Publicado 2007-03-29 · Atualizado 2017-07-20 · CVE-2006-4843

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM Lotus Domino versions prior to 6.5.6 IBM Lotus Domino versions 7.x prior to 7.0.2 FP1

Description: A cross-site scripting (XSS) issue exists in the Active Content Filter feature, allowing remote attackers to inject arbitrary web script or HTML via unspecified code sequences that bypass the protection scheme.

Recommendations: For versions prior to 6.5.6, update to version 6.5.6 or later. For versions 7.x prior to 7.0.2 FP1, update to version 7.0.2 FP1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2006-4843

Produtos afetados

Ibm Lotus Domino

Referências · 9

• 🔥 http://secunia.com/advisories/24633 · Exploit
• http://securitytracker.com/id?1017824 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=493 · Aviso do Fabricante
• http://securityfocus.com/bid/23173 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4843 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4843 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33280 · Nota
• http://vupen.com/english/advisories/2007/1133 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21257026 · Nota