CVE-2012-5943: IBM Lotus Inotes

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9.

Affected products

• IBM Lotus Inotes: version 8.5.0.0 only; version 8.5.0.1 only; version 8.5.1.0 only; version 8.5.1.1 only; version 8.5.1.2 only; version 8.5.1.3 only; …

Published 2013-03-26. Last modified 2026-06-16.