4.3
CVSSv2

CVE-2012-4846

Published: 19/12/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM Lotus Notes 8.5.x prior to 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm lotus notes 8.5.1.5

ibm lotus notes 8.5.1.3

ibm lotus notes 8.5.3.1

ibm lotus notes 8.5.3.2

ibm lotus notes 8.5.1.0

ibm lotus notes 8.5.1.2

ibm lotus notes 8.5.2.3

ibm lotus notes 8.5.2.0

ibm lotus notes 8.5.0.0

ibm lotus notes 8.5.0.1

ibm lotus notes 8.5.1.4

ibm lotus notes 8.5.2.2

ibm lotus notes 8.5.1

ibm lotus notes 8.5.1.1

ibm lotus notes 8.5.2.1

ibm lotus notes 8.5.3