Inotes (Ibm) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 56 known versions, newest CVE from 2020-07-01. Vendor: Ibm.

CVEs of Inotes

CVE-2017-1659 - CVSS 6.1 (medium), 2020-07-01: "HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based…
CVE-2013-0594 - CVSS 6.1 (medium), 2018-07-11: Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and…
CVE-2013-0592 - CVSS 5.4 (medium), 2018-07-11: Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to inject arbitrary web script or…
CVE-2013-0589 - CVSS 7.5 (high), 2018-07-11: IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive…
CVE-2017-1421 - CVSS 6.1 (medium), 2017-12-13: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2017-1130 - CVSS 6.5 (medium), 2017-09-05: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog…
CVE-2017-1129 - CVSS 6.5 (medium), 2017-09-05: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and…
CVE-2017-1327 - CVSS 6.1 (medium), 2017-08-03: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2017-1332 - CVSS 6.1 (medium), 2017-07-31: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2017-1214 - CVSS 5.7 (medium), 2017-06-12: IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM…
CVE-2017-1325 - CVSS 6.1 (medium), 2017-05-26: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2016-9990 - CVSS 6.1 (medium), 2017-03-31: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2016-5883 - CVSS 6.1 (medium), 2017-02-23: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2016-5881 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-6113 - CVSS 6.1 (medium), 2017-02-01: IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-2938 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-5882 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-5880 - CVSS 5.4 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-2939 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2016-5884 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…