CVE-2013-0538

Published: May 1, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49.

Affected (30)

Products: Ibm: Lotus Notes

Ibm

1 product

Lotus Notes

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes	Version 8.0.0
Ibm Lotus Notes	Version 8.0.1
Ibm Lotus Notes	Version 8.0.2.0
Ibm Lotus Notes	Version 8.0.2.1
Ibm Lotus Notes	Version 8.0.2.2
Ibm Lotus Notes	Version 8.0.2.3
Ibm Lotus Notes	Version 8.0.2.4
Ibm Lotus Notes	Version 8.0.2.5
Ibm Lotus Notes	Version 8.0.2.6
Ibm Lotus Notes	Version 8.0.2
Ibm Lotus Notes	Version 8.0
Ibm Lotus Notes	Version 8.5.0.0
Ibm Lotus Notes	Version 8.5.0.1
Ibm Lotus Notes	Version 8.5.1.0
Ibm Lotus Notes	Version 8.5.1.1
Ibm Lotus Notes	Version 8.5.1.2
Ibm Lotus Notes	Version 8.5.1.3
Ibm Lotus Notes	Version 8.5.1.4
Ibm Lotus Notes	Version 8.5.1.5
Ibm Lotus Notes	Version 8.5.1
Ibm Lotus Notes	Version 8.5.2.0
Ibm Lotus Notes	Version 8.5.2.1
Ibm Lotus Notes	Version 8.5.2.2
Ibm Lotus Notes	Version 8.5.2.3
Ibm Lotus Notes	Version 8.5.3.1
Ibm Lotus Notes	Version 8.5.3.2
Ibm Lotus Notes	Version 8.5.3.3
Ibm Lotus Notes	Version 8.5.3
Ibm Lotus Notes	Version 8.5
Ibm Lotus Notes	Version 9.0.0.0