CVE-2013-4064

LOW 2.1CVE-2013-4064 · Published 21/12/2013 · updated 16/06/2026

In short

CVE-2013-4064 is a LOW (CVSS 2.1) vulnerability affecting lotus domino (ibm), lotus inotes (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
lotus domino ibm	`= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0`	No fix yet
lotus inotes ibm	`= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/86595

More vulnerabilities in lotus domino

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

lotus domino

ibm

= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0

No fix yet

lotus inotes

ibm

= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0

No fix yet

More vulnerabilities in lotus domino

See all →