CVE-2004-2310: XSS

Published Dec 31, 2004

Updated

Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console.

Affected Software

1 affected component

IBM Lotus Domino=6.5.1

Event History

Dec 31, 2004

CVE Published

05:00 AM

Aug 16, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-2310?

CVE-2004-2310 is considered a moderate severity vulnerability due to its potential for cross-site scripting, which can lead to unauthorized actions by the user.

How do I fix CVE-2004-2310?

To fix CVE-2004-2310, it is recommended to upgrade to a patched version of IBM Lotus Domino that addresses this cross-site scripting vulnerability.

Who is affected by CVE-2004-2310?

CVE-2004-2310 affects users and systems running IBM Lotus Domino version 6.5.1.

What type of vulnerability is CVE-2004-2310?

CVE-2004-2310 is classified as a cross-site scripting (XSS) vulnerability.

Can CVE-2004-2310 be exploited remotely?

Yes, CVE-2004-2310 can be exploited remotely, allowing attackers to inject web scripts or HTML through the Quick Console.