LI
Product
Lotus Inotes
21
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Lotus Inotes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0282 | 5.4 | Nov 24 | Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR… Affected: 8.5.0.0; 8.5.0.1; 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; +14 more |
| CVE-2014-0913 | – | May 9 | Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an… Affected: 8.5.3.6; 9.0.1.0 |
| CVE-2013-4065 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4064 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4063 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.3.0; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +1 more |
| CVE-2013-4068 | – | Sep 20 | Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR… Affected: All versions, or not specified |
| CVE-2013-0595 | – | Aug 27 | Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.0.0; 8.5.1.0; 8.5.2.0; 8.5.3.0 |
| CVE-2013-0591 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 8.5.0.0; 8.5.1.0; 8.5.2.0; 8.5.3.0 |
| CVE-2013-0590 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 8.5.0.0; 8.5.1.0; 8.5.2.0; 8.5.3.0 |
| CVE-2013-0536 | – | Jun 21 | ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges… Affected: 8.5.2.0; 8.5.3.0 |
| CVE-2013-0525 | – | Mar 26 | Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX Affected: 8.5.0.0; 8.5.0.1; 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; +9 more |
| CVE-2012-5943 | – | Mar 26 | Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving… Affected: 8.5.0.0; 8.5.0.1; 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; +9 more |
| CVE-2012-2175 | – | Jun 20 | Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary… Affected: 8.5.0.0; 8.5.0.1; 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; +8 more |
| CVE-2010-0921 | – | Mar 3 | Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the… Affected: through 229.271; 229.011; 229.021; 229.031; 229.041; 229.051; +17 more |
| CVE-2010-0920 | – | Mar 3 | Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web… Affected: through 229.271; 229.011; 229.021; 229.031; 229.041; 229.051; +17 more |
| CVE-2010-0919 | – | Mar 3 | Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281… Affected: through 229.271; 229.011; 229.021; 229.031; 229.041; 229.051; +17 more |
| CVE-2010-0918 | – | Mar 3 | Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 have unknown impact and… Affected: through 229.271; 229.011; 229.021; 229.031; 229.041; 229.051; +17 more |
| CVE-2010-0276 | – | Jan 9 | IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that… Affected: All versions, or not specified |
| CVE-2010-0275 | – | Jan 9 | Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which… Affected: through 229.231; 229.011; 229.021; 229.031; 229.041; 229.051; +13 more |
| CVE-2010-0274 | – | Jan 9 | Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact… Affected: through 229.231; 229.011; 229.021; 229.031; 229.041; 229.051; +13 more |
| CVE-2009-4594 | – | Jan 9 | Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH Affected: through 229.111; 229.011; 229.021; 229.031; 229.041; 229.051; +2 more |
Showing 21