CVE-2013-3032: XSS
Published Aug 9, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN986NAA.
Affected Software
17 affected components
IBM Lotus Domino=8.5.0
IBM Lotus Domino=8.5.0.1
IBM Lotus Domino=8.5.1
IBM Lotus Domino=8.5.1.1
IBM Lotus Domino=8.5.1.2
IBM Lotus Domino=8.5.1.3
IBM Lotus Domino=8.5.1.4
IBM Lotus Domino=8.5.1.5
IBM Lotus Domino=8.5.2.0
IBM Lotus Domino=8.5.2.1
IBM Lotus Domino=8.5.2.2
IBM Lotus Domino=8.5.2.3
IBM Lotus Domino=8.5.2.4
IBM Lotus Domino=8.5.3.0
IBM Lotus Domino=8.5.3.1
IBM Lotus Domino=8.5.3.2
IBM Lotus Domino=9.0.0.0
Remediation
Patch Available
Event History
Aug 9, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3032?
CVE-2013-3032 is classified as a medium severity Cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-3032?
To mitigate CVE-2013-3032, upgrade to IBM Domino version 9.0 IF3 or higher.
3
Which versions of IBM Lotus Domino are affected by CVE-2013-3032?
CVE-2013-3032 affects multiple versions, including IBM Lotus Domino 8.5 through 9.0.0.0.
4
What type of vulnerability is CVE-2013-3032?
CVE-2013-3032 is a Cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-3032 affect user data?
Yes, CVE-2013-3032 can potentially allow attackers to inject malicious scripts that compromise user data.