« Volver al listado

CVE-2012-5943

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Lotus Inotes

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-5943",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-03-26T21:55:01.003",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628658",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80538",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628658",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80538",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en IBM iNotes v8.5.x anterior a v8.5.3 FP4 que permite usuarios asistidos remotos  inyectar secuencias de comandos web o HTML a través de vectores implicando el correo, también conocido SPR JDOE8ZZS9."
    }
  ],
  "lastModified": "2026-06-16T23:47:36.573",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF04F0F8-E2AC-4080-91CE-E871CF32FBB1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8865EB47-3C1B-485B-94CA-852F1C40FDE7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FA02A70-D433-4AEB-B7CD-77744E52D280"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84F5294B-DAEF-4450-81C1-AEB951364336"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EF658AD-31D5-4A88-920E-98B722D48355"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C029E446-2BBA-491D-9AA0-D83A3879CCBC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "618F1C0E-8E43-4D63-A497-9FFEE4E3A90D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53A4CC23-6053-40FC-BFC8-08FAA9F0AE53"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA621B45-7747-491D-A983-DD125BEE2753"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA57E455-B3CB-4F53-854B-21D8DFB95ED1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96E0153C-BDC4-4D01-A292-AD97A5C168EA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4ED4C08-82E5-4165-A585-E23E23015609"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76D0D493-1BFD-4054-BDB0-F338BFAFDC5F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F088F719-F4BE-4B49-B022-96D43664155B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_inotes:8.5.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7F797B7-C3EA-4A12-8D69-217FBD4B9EB1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}