CVE-2012-3302

Published: Aug 21, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.

Affected (24)

Products: Ibm: Lotus Domino

Ibm

1 product

Lotus Domino

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Domino	Version 7.0.1.1
Ibm Lotus Domino	Version 7.0.1
Ibm Lotus Domino	Version 7.0.2.2
Ibm Lotus Domino	Version 7.0.2
Ibm Lotus Domino	Version 7.0.3.0
Ibm Lotus Domino	Version 7.0.3.1
Ibm Lotus Domino	Version 7.0.4.0
Ibm Lotus Domino	Version 7.0.4.1
Ibm Lotus Domino	Version 7.0.4.2

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Domino	Version 8.5.0.1
Ibm Lotus Domino	Version 8.5.0
Ibm Lotus Domino	Version 8.5.1.1
Ibm Lotus Domino	Version 8.5.1.2
Ibm Lotus Domino	Version 8.5.1.3
Ibm Lotus Domino	Version 8.5.1.4
Ibm Lotus Domino	Version 8.5.1.5
Ibm Lotus Domino	Version 8.5.2.0
Ibm Lotus Domino	Version 8.5.2.1
Ibm Lotus Domino	Version 8.5.2.2
Ibm Lotus Domino	Version 8.5.2.3
Ibm Lotus Domino	Version 8.5.2.4
Ibm Lotus Domino	Version 8.5.3.0
Ibm Lotus Domino	Version 8.5.3.1
Ibm Lotus Domino	Version 8.5.3.2