LD
Product
Lotus Domino
86
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Lotus Domino to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-5544 | 7.8 | Oct 29 | IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files… Affected: before 6.5.5; 7.0 before 7.0.2; 6.5.5; 7.0.2 |
| CVE-2014-3086 | – | Aug 12 | Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain… Affected: 8.5.3.0; 9.0.1.0 |
| CVE-2014-0913 | – | May 9 | Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an… Affected: 8.5.3.6; 9.0.1.0 |
| CVE-2014-0892 | – | Apr 23 | IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +16 more |
| CVE-2014-0822 | – | Feb 6 | The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors,… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +15 more |
| CVE-2013-4065 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4064 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4063 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4055 | – | Nov 8 | Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or… Affected: 8.5.0; 9.0.0.0 |
| CVE-2013-4051 | – | Nov 8 | Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or… Affected: 8.5.0; 9.0.0.0 |
| CVE-2013-4050 | – | Nov 8 | Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the… Affected: 8.5.0; 9.0.0.0 |
| CVE-2013-5389 | – | Oct 22 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.3.0; 9.0.0.0 |
| CVE-2013-5388 | – | Oct 22 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.3.0; 9.0.0.0 |
| CVE-2013-4068 | – | Sep 20 | Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 9.0.0.0 |
| CVE-2013-0595 | – | Aug 27 | Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +12 more |
| CVE-2013-0591 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +12 more |
| CVE-2013-0590 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +12 more |
| CVE-2013-3990 | – | Aug 9 | Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +13 more |
| CVE-2013-3032 | – | Aug 9 | Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +11 more |
| CVE-2013-3027 | – | Aug 9 | Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a crafted web page, aka SPR PTHN97XHFW Affected: 9.0.0.0 |
| CVE-2013-0489 | – | Mar 27 | Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +10 more |
| CVE-2013-0488 | – | Mar 27 | Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +10 more |
| CVE-2013-0487 | – | Mar 27 | The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +10 more |
| CVE-2013-0486 | – | Mar 27 | Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +10 more |
| CVE-2012-4844 | – | Feb 27 | Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +8 more |
| CVE-2012-4842 | – | Feb 27 | Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +8 more |
| CVE-2012-4823 | – | Jan 11 | Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; 8.0.2.3; +17 more |
| CVE-2012-4822 | – | Jan 11 | Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; 8.0.2.3; +17 more |
| CVE-2012-4821 | – | Jan 11 | Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; 8.0.2.3; +17 more |
| CVE-2012-4820 | – | Jan 11 | Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; 8.0.2.3; +17 more |
| CVE-2012-3302 | – | Aug 21 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL… Affected: 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.2; 7.0.3.0; 7.0.3.1; +18 more |
| CVE-2012-3301 | – | Aug 21 | Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response… Affected: 8.5.0; 8.5.0.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; +9 more |
| CVE-2011-1393 | – | Dec 27 | Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon… Affected: through 8.5.2; 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; +12 more |
| CVE-2011-3576 | – | Sep 19 | Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader… Affected: 8.5.2 |
| CVE-2011-3575 | – | Sep 19 | Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long… Affected: 8.5.2 |
| CVE-2011-1520 | – | Mar 25 | The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to… Affected: All versions, or not specified |
| CVE-2011-1519 | – | Mar 25 | The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which… Affected: 7.0; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.2.2; +27 more |
| CVE-2011-0914 | – | Feb 8 | Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP… Affected: through 8.5.2.2; 4.6.1; 4.6.3; 4.6.4; 5.0; 5.0.1; +34 more |
| CVE-2011-0913 | – | Feb 8 | Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP… Affected: through 8.5.2.2; 4.6.1; 4.6.3; 4.6.4; 5.0; 5.0.1; +34 more |
| CVE-2011-0915 | – | Feb 8 | Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in… Affected: through 8.5.2.2; 4.6.1; 4.6.3; 4.6.4; 5.0; 5.0.1; +34 more |
| CVE-2011-0916 | – | Feb 8 | Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed… Affected: All versions, or not specified |
| CVE-2011-0917 | – | Feb 8 | Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX Affected: All versions, or not specified |
| CVE-2011-0918 | – | Feb 8 | Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID… Affected: All versions, or not specified |
| CVE-2011-0919 | – | Feb 8 | Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an… Affected: All versions, or not specified |
| CVE-2011-0920 | – | Feb 8 | The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and… Affected: All versions, or not specified |
| CVE-2010-3407 | – | Sep 16 | Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1; 8.0.2.2; 8.0.2.3; +5 more |
| CVE-2010-0927 | – | Mar 5 | Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to… Affected: 7.0; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.2.2; +5 more |
| CVE-2010-0358 | – | Jan 20 | Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other… Affected: 7.0; 8.5.0.1 |
| CVE-2010-0276 | – | Jan 9 | IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that… Affected: 8.0.2.3 |
| CVE-2009-3087 | – | Sep 8 | Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via… Affected: 8.0 |