Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm lotus domino 8.5.0.1 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2010-0358
Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote malicious users to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than...
Ibm Lotus Domino 7.0Ibm Lotus Domino 8.5.0.1
9.3
CVSSv2
CVE-2010-3407
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x prior to 8.0.2 FP5 and 8.5.x prior to 8.5.1 FP2 allows remote malicious users to execute arbitrary code via a long e-mail address in an...
Ibm Lotus Domino 8.0.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.0.2.2Ibm Lotus Domino 8.0.2.3Ibm Lotus Domino 8.0.2Ibm Lotus Domino 8.0.2.1Ibm Lotus Domino 8.0Ibm Lotus Domino 8.0.2.4Ibm Lotus Domino 8.5.0.1
4.3
CVSSv2
CVE-2012-4844
Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x up to and including 8.5.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.2.0
5.8
CVSSv2
CVE-2012-4842
Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x up to and including 8.5.3 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.1.4
4.3
CVSSv2
CVE-2012-3301
Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x prior to 8.5.4 allow remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and previous version...
Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.3.2
4.3
CVSSv2
CVE-2013-0488
Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
4.3
CVSSv2
CVE-2013-0486
Memory leak in the HTTP server in IBM Domino 8.5.x allows remote malicious users to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
8.5
CVSSv2
CVE-2013-0487
The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN.
Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
6
CVSSv2
CVE-2013-0489
Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators.
Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.0
4.3
CVSSv2
CVE-2013-3032
Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN986NAA.
Ibm Lotus Domino 9.0.0.0Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook