CVE-2012-3302

no score yetEPSS 1.1%

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-08-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_domino

References

http://websecurity.com.ua/5839/
http://www-01.ibm.com/support/docview.wss?uid=swg21608160
https://exchange.xforce.ibmcloud.com/vulnerabilities/77401
http://websecurity.com.ua/5839/
http://www-01.ibm.com/support/docview.wss?uid=swg21608160

Check your stack JSON