CVE-2012-3302: IBM Lotus Domino

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.

Affected products

• IBM Lotus Domino: version 7.0.1 only; version 7.0.1.1 only; version 7.0.2 only; version 7.0.2.2 only; version 7.0.3.0 only; version 7.0.3.1 only; …

Published 2012-08-21. Last modified 2026-06-16.