CVE-2016-0282

Published: Nov 24, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.

Affected (20)

Products: Ibm: Lotus Inotes

Ibm

1 product

Lotus Inotes

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Inotes	Version 8.5.0.0
Ibm Lotus Inotes	Version 8.5.0.1
Ibm Lotus Inotes	Version 8.5.1.0
Ibm Lotus Inotes	Version 8.5.1.1
Ibm Lotus Inotes	Version 8.5.1.2
Ibm Lotus Inotes	Version 8.5.1.3
Ibm Lotus Inotes	Version 8.5.1.4
Ibm Lotus Inotes	Version 8.5.1.5
Ibm Lotus Inotes	Version 8.5.2.0
Ibm Lotus Inotes	Version 8.5.2.1
Ibm Lotus Inotes	Version 8.5.2.2
Ibm Lotus Inotes	Version 8.5.2.3
Ibm Lotus Inotes	Version 8.5.2.4
Ibm Lotus Inotes	Version 8.5.3.0
Ibm Lotus Inotes	Version 8.5.3.1
Ibm Lotus Inotes	Version 8.5.3.2
Ibm Lotus Inotes	Version 8.5.3.3
Ibm Lotus Inotes	Version 8.5.3.4
Ibm Lotus Inotes	Version 8.5.3.5
Ibm Lotus Inotes	Version 8.5.3.6