CVE-2004-2667: XSS
Published Dec 31, 2004
·Updated
Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Affected Software
4 affected components
IBM Lotus Domino=6.0
IBM Lotus Domino=6.5
IBM Lotus Domino=6.0
IBM Lotus Domino=6.5
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Dec 29, 2006
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2667?
CVE-2004-2667 is considered a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
2
How do I fix CVE-2004-2667?
To fix CVE-2004-2667, upgrade IBM Lotus Domino to version 6.0.4 or 6.5.2 or later.
3
Which versions of IBM Lotus Domino are affected by CVE-2004-2667?
CVE-2004-2667 affects IBM Lotus Domino versions 6.0.x before 6.0.4 and 6.5.x before 6.5.2.
4
What does CVE-2004-2667 exploit?
CVE-2004-2667 exploits a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.
5
What are the potential impacts of CVE-2004-2667?
The potential impacts of CVE-2004-2667 include unauthorized access, data theft, and malicious actions executed under the user's context.