CVE-2012-4825

Published: Oct 8, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.

Affected (9)

Products: Ibm: Lotus Notes Traveler

Ibm

1 product

Lotus Notes Traveler

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes Traveler	Up to 8.5.3.1
Ibm Lotus Notes Traveler	Version 8.5.0.0
Ibm Lotus Notes Traveler	Version 8.5.0.1
Ibm Lotus Notes Traveler	Version 8.5.0.2
Ibm Lotus Notes Traveler	Version 8.5.1.1
Ibm Lotus Notes Traveler	Version 8.5.1.2
Ibm Lotus Notes Traveler	Version 8.5.1.3
Ibm Lotus Notes Traveler	Version 8.5.2.1
Ibm Lotus Notes Traveler	Version 8.5.3