CVE-2013-0127

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to…

published May 1, 2013

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and JMOY95BN49.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03787 · 89.9th percentile
Published
2013-05-01T10:00Z
EPSS history
Timeline
  • 01 MAY 10:00Z
    IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to…
    cvelistv5