Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm domino web access vulnerabilities and exploits

(subscribe to this query)
950
VMScore
CVE-2007-4474
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote malicious users to execute arbitrary code, as demonstrated by an overflow from a long Ge...
Ibm Domino Web Access 6.0.1.1Ibm Domino Web Access 6.0.2Ibm Domino Web Access 6.5.3Ibm Domino Web Access 6.5.4Ibm Domino Web Access 6.0Ibm Domino Web Access 6.0.1Ibm Domino Web Access 6.5.1Ibm Domino Web Access 6.5.2Ibm Lotus Domino Web Access 7.0.34.1Ibm Domino Web Access 6.0.3Ibm Domino Web Access 6.0.4Ibm Domino Web Access 6.5.5Ibm Domino Web Access 7.0Ibm Domino Web Access 6.0.5Ibm Domino Web Access 6.5Ibm Domino Web Access 7.0.1Ibm Lotus Domino Web Access 7.0.1
676
VMScore
CVE-2010-0919
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 prior to 7.0.4, 8.0, 8.0.2, and prior to 229.281 for Domino 8.0.2 FP4 allows remote malicious users to execute arbitrary code via a long URL argu...
Ibm Domino Web Access 8.0.2Ibm Domino Web Access 7.0.3Ibm Domino Web Access 8.0Ibm Domino Web Access 6.5Ibm Domino Web Access 7.0Ibm Domino Web Access 7.0.1Ibm Domino Web Access 7.0.2Ibm Lotus Inotes 229.201Ibm Lotus Inotes 229.191Ibm Lotus Inotes 229.111Ibm Lotus Inotes 229.101Ibm Lotus InotesIbm Lotus Inotes 229.221Ibm Lotus Inotes 229.211Ibm Lotus Inotes 229.141Ibm Lotus Inotes 229.131Ibm Lotus Inotes 229.021Ibm Lotus Inotes 229.011Ibm Lotus Inotes 229.261Ibm Lotus Inotes 229.181Ibm Lotus Inotes 229.171Ibm Lotus Inotes 229.061
383
VMScore
CVE-2009-3105
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 211.241 for Domino 8.0.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC.
Ibm Domino Web Access 8.0.1
668
VMScore
CVE-2006-4763
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote malicious users to obtain a user's privileges by intercepting the LtpaToken cookie.
Ibm Lotus Domino Web Access 7.0.1
440
VMScore
CVE-2006-0663
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote malicious users to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI, as demonstrated using "java
script:"; or ...
Ibm Lotus Domino Inotes Client 6.5.4Ibm Lotus Domino Inotes Client 7.0
505
VMScore
CVE-2004-0668
Web Access in Lotus Domino 6.5.1 allows remote malicious users to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment.
890
VMScore
CVE-2010-0918
Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.281 for Domino 8.0.2 FP4 have unknown impact and attack vectors.
Ibm Lotus Inotes 229.231Ibm Lotus Inotes 229.221Ibm Lotus Inotes 229.211Ibm Lotus Inotes 229.201Ibm Lotus Inotes 229.131Ibm Lotus Inotes 229.111Ibm Lotus InotesIbm Lotus Inotes 229.151Ibm Lotus Inotes 229.141Ibm Lotus Inotes 229.031Ibm Lotus Inotes 229.021Ibm Lotus Inotes 229.011Ibm Lotus Inotes 229.251Ibm Lotus Inotes 229.241Ibm Lotus Inotes 229.171Ibm Lotus Inotes 229.161Ibm Lotus Inotes 229.051Ibm Lotus Inotes 229.041Ibm Lotus Inotes 229.261Ibm Lotus Inotes 229.191Ibm Lotus Inotes 229.181Ibm Lotus Inotes 229.101
383
VMScore
CVE-2010-0920
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.281 for Domino 8.0.2 FP4 allows remote malicious users to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes....
Ibm Lotus Inotes 229.241Ibm Lotus Inotes 229.221Ibm Lotus Inotes 229.151Ibm Lotus Inotes 229.131Ibm Lotus Inotes 229.041Ibm Lotus Inotes 229.021Ibm Lotus InotesIbm Lotus Inotes 229.201Ibm Lotus Inotes 229.191Ibm Lotus Inotes 229.181Ibm Lotus Inotes 229.171Ibm Lotus Inotes 229.261Ibm Lotus Inotes 229.251Ibm Lotus Inotes 229.111Ibm Lotus Inotes 229.101Ibm Lotus Inotes 229.061Ibm Lotus Inotes 229.051Ibm Lotus Inotes 229.231Ibm Lotus Inotes 229.211Ibm Lotus Inotes 229.161Ibm Lotus Inotes 229.141Ibm Lotus Inotes 229.031
890
VMScore
CVE-2009-4594
Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH.
Ibm Lotus Inotes 229.021Ibm Lotus Inotes 229.011Ibm Lotus Inotes 229.041Ibm Lotus Inotes 229.031Ibm Lotus Inotes 229.101Ibm Lotus InotesIbm Lotus Inotes 229.061Ibm Lotus Inotes 229.051
890
VMScore
CVE-2010-0274
Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5.
Ibm Lotus Inotes 229.191Ibm Lotus Inotes 229.181Ibm Lotus Inotes 229.101Ibm Lotus Inotes 229.061Ibm Lotus Inotes 229.211Ibm Lotus Inotes 229.201Ibm Lotus Inotes 229.131Ibm Lotus Inotes 229.111Ibm Lotus InotesIbm Lotus Inotes 229.171Ibm Lotus Inotes 229.161Ibm Lotus Inotes 229.051Ibm Lotus Inotes 229.041Ibm Lotus Inotes 229.221Ibm Lotus Inotes 229.151Ibm Lotus Inotes 229.141Ibm Lotus Inotes 229.031Ibm Lotus Inotes 229.021Ibm Lotus Inotes 229.011
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook