Field Assessment
AI analysis pending.
CVE
CVE-2012-3302
Severity
MEDIUM
CVSS
4.3
EPSS
1.15%
Original Filing — NVD Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.