CVE-2006-0662

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-13 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser.

Affected products

IBM Lotus Domino Inotes Client: 6.5.4

References

http://secunia.com/advisories/16340
http://secunia.com/secunia_research/2005-38/advisory/
http://securitytracker.com/id?1015610
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919
http://www.osvdb.org/23077
http://www.securityfocus.com/bid/16577
http://www.vupen.com/english/advisories/2006/0499
https://exchange.xforce.ibmcloud.com/vulnerabilities/24612
http://secunia.com/advisories/16340
http://secunia.com/secunia_research/2005-38/advisory/
http://securitytracker.com/id?1015610
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919

Get alerted when CVE-2006-0662 or the next vulnerability affects your stack