Summary
This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability.
Impact
Successful exploitation will allow attackers to inject HTML based code.
Impact Level: Application
Solution
Vendor has released a patch to fix the issue, refer below link for patch details.
http://www-01.ibm.com/support/docview.wss?uid=swg21403834
Insight
The flaw is due to error in the RSS reader widget, caused when items are saved from an RSS feed as local HTML documents. This can be exploited via a crafted feed.
Affected
IBM Lotus Notes Version 8.5 on Linux.
References
Severity
Classification
-
CVE CVE-2009-3114 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities