CVE:CVE-2010-0920
CNNVD:CNNVD-201003-040
IBM Lotus iNotes是美国IBM公司的一套基于Web的电子邮件软件。该软件可帮助不同类型的用户（在线用户和离线用户）有效地管理关键业务信息和协作。
运行在Domino上的IBM Lotus iNotes (又称Domino Web Access 或 DWA) 存在跨站脚本攻击漏洞。远程攻击者可以借助缺失"跨站脚本/跨站请求伪造筛选和Referer检查修复"功能的向量，执行跨站攻击，导致任意web脚本和HTML注入。
solution:Upgrade ibm lotus_inotes to a higher version than 229.271,229.011,229.021,229.031,229.041,229.051,229.061,229.101,229.111,229.131,229.141,229.151,229.161,229.171,229.181,229.191,229.201,229.211,229.221,229.231,229.241,229.251,229.261,and avoid the version (,229.271],229.011,229.021,229.031,229.041,229.051,229.061,229.101,229.111,229.131,229.141,229.151,229.161,229.171,229.181,229.191,229.201,229.211,229.221,229.231,229.241,229.251,229.261