IBM Lotus Domino Inotes Client vulnerabilities

2 CVEs affecting IBM Lotus Domino Inotes Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-0663, published 2006-02-13.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-0663, published 2006-02-13. Medium severity, CVSS 4.3. EPSS: 5.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded…
• CVE-2006-0662, published 2006-02-13. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly…