| Package | Affected versions | Patched versions |
|---|---|---|
| domino | = 10.0= 10.0.1= 11.0= 11.0.1= 12.0= 12.0.1= 9.0= 9.0.1 | |
| hcl inotes | = 10.0= 10.0.1= 11.0= 11.0.1= 12.0= 12.0.1= 9.0.1 |
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free