CVE-2013-0127

Published: May 1, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and JMOY95BN49.

Affected (30)

Products: Ibm: Lotus Notes

Ibm

1 product

Lotus Notes

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes	Version 8.0.0
Ibm Lotus Notes	Version 8.0.1
Ibm Lotus Notes	Version 8.0.2.0
Ibm Lotus Notes	Version 8.0.2.1
Ibm Lotus Notes	Version 8.0.2.2
Ibm Lotus Notes	Version 8.0.2.3
Ibm Lotus Notes	Version 8.0.2.4
Ibm Lotus Notes	Version 8.0.2.5
Ibm Lotus Notes	Version 8.0.2.6
Ibm Lotus Notes	Version 8.0.2
Ibm Lotus Notes	Version 8.0
Ibm Lotus Notes	Version 8.5.0.0
Ibm Lotus Notes	Version 8.5.0.1
Ibm Lotus Notes	Version 8.5.1.0
Ibm Lotus Notes	Version 8.5.1.1
Ibm Lotus Notes	Version 8.5.1.2
Ibm Lotus Notes	Version 8.5.1.3
Ibm Lotus Notes	Version 8.5.1.4
Ibm Lotus Notes	Version 8.5.1.5
Ibm Lotus Notes	Version 8.5.1
Ibm Lotus Notes	Version 8.5.2.0
Ibm Lotus Notes	Version 8.5.2.1
Ibm Lotus Notes	Version 8.5.2.2
Ibm Lotus Notes	Version 8.5.2.3
Ibm Lotus Notes	Version 8.5.3.1
Ibm Lotus Notes	Version 8.5.3.2
Ibm Lotus Notes	Version 8.5.3.3
Ibm Lotus Notes	Version 8.5.3
Ibm Lotus Notes	Version 8.5
Ibm Lotus Notes	Version 9.0.0.0