CVE-2017-1325

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22003497Patch, Vendor Advisory
• http://www.securitytracker.com/id/1038600
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125976Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22003497Patch, Vendor Advisory
• http://www.securitytracker.com/id/1038600
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125976Vendor Advisory

Published

May 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13244A elevation of privilege vulnerability in the Upstream kerne…
• CVE-2017-13245A elevation of privilege vulnerability in the Upstream kerne…
• CVE-2017-13246A information disclosure vulnerability in the Upstream kerne…
• CVE-2017-13247In the Pixel 2 bootloader, there is a missing permission che…
• CVE-2017-13248In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr…
• CVE-2017-13249In impeg2d_api_set_display_frame of impeg2d_api_main.c, ther…
• CVE-2017-13250In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is…
• CVE-2017-13251In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there i…
• CVE-2017-13252In CryptoHal::decrypt of CryptoHal.cpp, there is an out of b…
• CVE-2017-13253In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a pos…
• CVE-2017-13254A other vulnerability in the Android media framework (AACExt…
• CVE-2017-13255In process_service_attr_req of sdp_server.c, there is an out…