Vulnerabilities > CVE-2007-1941 - HTML Injection vulnerability in IBM Lotus Domino Web Access Active Content Filter
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE network
ibm
Summary
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |