| Package | Affected versions | Patched versions |
|---|---|---|
| lotus domino | = 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0 | |
| lotus inotes | = 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 9.0.0.0 |
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free