Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2006-0663
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-13 Feb, 2006 | 11:06
Updated At-03 Apr, 2025 | 01:03

Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI, as demonstrated using "java
script:"; or (3) when the Domino Web Access ActiveX control is not installed, via an email attachment filename.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
IBM Corporation
ibm
>>lotus_domino_inotes_client>>6.5.4
cpe:2.3:a:ibm:lotus_domino_inotes_client:6.5.4:*:*:*:*:*:*:*
IBM Corporation
ibm
>>lotus_domino_inotes_client>>7.0
cpe:2.3:a:ibm:lotus_domino_inotes_client:7.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

This vulnerability is addressed in the following product releases: IBM, Lotus Domino iNotes Client, 6.5.5 IBM, Lotus Domino iNotes Client, 7.0.1

Vendor Statements
References
HyperlinkSourceResource
http://secunia.com/advisories/16340cve@mitre.org
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-38/advisory/cve@mitre.org
Patch
Vendor Advisory
http://securitytracker.com/id?1015610cve@mitre.org
Exploit
Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919cve@mitre.org
Patch
http://www.osvdb.org/23077cve@mitre.org
Patch
http://www.osvdb.org/23078cve@mitre.org
Patch
http://www.osvdb.org/23079cve@mitre.org
Patch
http://www.securityfocus.com/bid/16577cve@mitre.org
Exploit
Patch
http://www.vupen.com/english/advisories/2006/0499cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24611cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/24613cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/24614cve@mitre.org
N/A
http://secunia.com/advisories/16340af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-38/advisory/af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://securitytracker.com/id?1015610af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.osvdb.org/23077af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.osvdb.org/23078af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.osvdb.org/23079af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.securityfocus.com/bid/16577af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
http://www.vupen.com/english/advisories/2006/0499af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24611af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/24613af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/24614af854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found