{ "id": "CVE-2005-4819", "sourceIdentifier": "cve@mitre.org", "published": "2005-12-31T05:00:00.000", "lastModified": "2024-11-21T00:05:15.517", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "baseScore": 6.8, "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL" }, "baseSeverity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "9C9EE627-6072-4359-981B-0168F7D44B7F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "8F342FD1-7A60-4E7D-B56A-E1C3D560C728" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "EFBB2FBE-9A0A-49C9-A281-4D053513016B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "D1B84127-574D-4C12-8823-787B1BBBAEA7" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "C7708DE5-A3C2-4024-B5AE-FC9DE963935F" } ] } ] } ], "references": [ { "url": "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "http://www.osvdb.org/displayvuln.php?osvdb_id=19614", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "http://www.securityfocus.com/bid/14901", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "http://www.securitytracker.com/alerts/2005/Sep/1014946.html", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22358", "source": "cve@mitre.org" }, { "url": "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ] }, { "url": "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ] }, { "url": "http://www.osvdb.org/displayvuln.php?osvdb_id=19614", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ] }, { "url": "http://www.securityfocus.com/bid/14901", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ] }, { "url": "http://www.securitytracker.com/alerts/2005/Sep/1014946.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ] }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22358", "source": "af854a3a-2127-422b-91ae-364da2661108" } ] }