Description
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation iNotes
9.0affected8.5.3affected8.5.2affected8.5.1affected8.5affected8.0.2affected8.5.3.6affected9.0.1affected8.58.5.3affectedFixaffectedPackaffected6affectedInterimaffected1affected8.5.xaffected8.5.1.5affected8.5.2.4affected9.0.1.7affected