CVE-2013-4065: XSS
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4065?
CVE-2013-4065 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-4065?
To fix CVE-2013-4065, you should upgrade to IBM Domino or iNotes version 8.5.3 FP6 or 9.0.1 or later.
Who is affected by CVE-2013-4065?
CVE-2013-4065 affects users of IBM Domino versions 8.5.x prior to FP6 and 9.0.x prior to 9.0.1 when ultra-light mode is enabled.
What type of attack does CVE-2013-4065 enable?
CVE-2013-4065 enables remote attackers to inject arbitrary web scripts or HTML through active content in email messages.
Is CVE-2013-4065 specific to certain configurations?
Yes, CVE-2013-4065 specifically affects IBM iNotes and Domino when ultra-light mode is enabled.