This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Impact Level: System/Application

Upgrade to IBM Lotus Notes 8.5.3 FP3 or later, For updates refer to http://www-01.ibm.com/support/docview.wss?uid=swg21619604

An error exists within the Web applications which allows an attacker to read or set the cookie value by injecting script.

IBM Lotus Notes Version 8.x before 8.5.3 FP3 on windows

• http://secunia.com/advisories/51593
• http://securitytracker.com/id?1027887
• http://www-01.ibm.com/support/docview.wss?uid=swg21619604
• http://www.osvdb.org/88429
• http://xforce.iss.net/xforce/xfdb/79535

---

Updated on 2015-03-25