CVE-2007-5924: XSS
Published Nov 10, 2007
·Updated
Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected components
IBM Lotus Domino<=6.5.6
IBM Lotus Domino=7.0
IBM Lotus Domino=7.0.2
IBM Lotus Domino=7.0.2
Event History
Nov 10, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5924?
CVE-2007-5924 is considered to have a medium severity due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2007-5924?
To fix CVE-2007-5924, upgrade to IBM Lotus Domino version 6.5.6 FP2 or 7.0.2 FP2 or later.
3
Who is affected by CVE-2007-5924?
CVE-2007-5924 affects remote authenticated users on vulnerable versions of IBM Lotus Domino.
4
What types of attacks are possible with CVE-2007-5924?
CVE-2007-5924 allows attackers to inject arbitrary web scripts or HTML, leading to cross-site scripting (XSS) attacks.
5
Is authentication required to exploit CVE-2007-5924?
Yes, CVE-2007-5924 requires that the attacker is a remote authenticated user to exploit the vulnerability.