CVE-2017-1327

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22003664Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100139
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126062VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22003664Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100139
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126062VDB Entry, Vendor Advisory

Published

Aug 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13264A other vulnerability in the Android media framework (Avcdec…
• CVE-2017-13265A elevation of privilege vulnerability in the Android system…
• CVE-2017-13266In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possi…
• CVE-2017-13267In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possi…
• CVE-2017-13268A information disclosure vulnerability in the Android system…
• CVE-2017-13269A information disclosure vulnerability in the Android system…
• CVE-2017-13270A elevation of privilege vulnerability in the upstream kerne…
• CVE-2017-13271A elevation of privilege vulnerability in the upstream kerne…
• CVE-2017-13272In alarm_ready_generic of alarm.cc, there is a possible out …
• CVE-2017-13273In xt_qtaguid.c, there is a race condition due to insufficie…
• CVE-2017-13274In the getHost() function of UriTest.java, there is the poss…
• CVE-2017-13275In getVSCoverage of CmapCoverage.cpp, there is a possible ou…