Skip to content
Not rated

CVE-2017-1325 IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting

Description

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976.

Affected products and versions

Product Affected versions Fixed in
iNotes 9.0 9.0 → 9.0.1.8 No fix stated
iNotes 8.5 8.5 → 8.5.3.6 No fix stated
The 5 CVEs of iNotes →
Track this CVE