CVE-2005-2175

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

5.21% chance of exploitation in the next 30 days, 92nd percentile

Published

2005-07-09

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25944

Security advisories

• http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html

References

• CVE Record
• NVD entry