Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_inotes:8.5.3.5:*:*:*:*:*:*:*

part: a version: 8.5.3.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Inotes (a3b9faef-b72a-5b19-99f3-8aef4e1126b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0282 vulnerable 2026-06-08 05:07:14.860796 Details available
Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.
Published: 2016-11-24T19:41:00.000Z
Updated: 2024-08-05T22:15:23.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4065 vulnerable 2026-06-08 05:04:33.720464 Details available
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.
Published: 2013-12-21T11:00:00.000Z
Updated: 2024-08-06T16:30:49.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4064 vulnerable 2026-06-08 05:04:33.719754 Details available
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.
Published: 2013-12-21T11:00:00.000Z
Updated: 2024-08-06T16:30:49.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4063 vulnerable 2026-06-08 05:04:33.718635 Details available
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP.
Published: 2013-12-21T11:00:00.000Z
Updated: 2024-08-06T16:30:50.013Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.