PT-2012-5597 · Ibm · Ibm Lotus Notes Traveler

CVE-2012-4825

·

Published

2012-10-08

·

Updated

2012-10-08

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.3.2
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the userId or address parameter in a getClientConfigFile action.
Recommendations For versions prior to 8.5.3.2, update to version 8.5.3.2 or later to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-4825

Affected Products

Ibm Lotus Notes Traveler