Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm lotus domino 8.5.3.1 vulnerabilities and exploits

(subscribe to this query)
7.1
CVSSv2
CVE-2013-4068
Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8.
Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.3.2Ibm Lotus Inotes -Ibm Lotus Domino 9.0.0.0Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.3.3Ibm Lotus Domino 8.5.3.4
2.1
CVSSv2
CVE-2013-4064
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x prior to 8.5.3 FP6 and 9.0.x prior to 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.
Ibm Lotus Inotes 8.5.3.1Ibm Lotus Inotes 8.5.3.0Ibm Lotus Domino 9.0.0.0Ibm Lotus Domino 8.5.3.5Ibm Lotus Domino 8.5.3.4Ibm Lotus Inotes 8.5.3.3Ibm Lotus Inotes 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.3.0Ibm Lotus Inotes 9.0.0.0Ibm Lotus Inotes 8.5.3.5Ibm Lotus Inotes 8.5.3.4Ibm Lotus Domino 8.5.3.3Ibm Lotus Domino 8.5.3.2
4.3
CVSSv2
CVE-2013-4063
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x prior to 8.5.3 FP6 and 9.0.x prior to 9.0.1 allows remote malicious users to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP.
Ibm Lotus Inotes 8.5.3.5Ibm Lotus Inotes 8.5.3.4Ibm Lotus Domino 8.5.3.3Ibm Lotus Inotes 8.5.3.3Ibm Lotus Inotes 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.3.0Ibm Lotus Inotes 8.5.3.1Ibm Lotus Inotes 8.5.3.0Ibm Lotus Domino 9.0.0.0Ibm Lotus Domino 8.5.3.2Ibm Lotus Inotes 9.0.0.0Ibm Lotus Domino 8.5.3.5Ibm Lotus Domino 8.5.3.4
2.6
CVSSv2
CVE-2013-4065
Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x prior to 8.5.3 FP6 and 9.0.x prior to 9.0.1, when ultra-light mode is enabled, allows remote malicious users to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.
Ibm Lotus Inotes 8.5.3.0Ibm Lotus Domino 8.5.3.5Ibm Lotus Inotes 9.0.0.0Ibm Lotus Inotes 8.5.3.5Ibm Lotus Domino 8.5.3.4Ibm Lotus Domino 8.5.3.3Ibm Lotus Domino 8.5.3.2Ibm Lotus Inotes 8.5.3.2Ibm Lotus Inotes 8.5.3.1Ibm Lotus Domino 9.0.0.0Ibm Lotus Inotes 8.5.3.4Ibm Lotus Inotes 8.5.3.3Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.3.0
4.3
CVSSv2
CVE-2012-3301
Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x prior to 8.5.4 allow remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and previous version...
Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.3.2
4.3
CVSSv2
CVE-2013-0488
Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
4.3
CVSSv2
CVE-2013-0486
Memory leak in the HTTP server in IBM Domino 8.5.x allows remote malicious users to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
8.5
CVSSv2
CVE-2013-0487
The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN.
Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.2.2
6
CVSSv2
CVE-2013-0489
Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators.
Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.4Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.0
4.3
CVSSv2
CVE-2013-3032
Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN986NAA.
Ibm Lotus Domino 9.0.0.0Ibm Lotus Domino 8.5.1.4Ibm Lotus Domino 8.5.1.5Ibm Lotus Domino 8.5.3.2Ibm Lotus Domino 8.5.1.2Ibm Lotus Domino 8.5.1.3Ibm Lotus Domino 8.5.3.0Ibm Lotus Domino 8.5.3.1Ibm Lotus Domino 8.5.0Ibm Lotus Domino 8.5.0.1Ibm Lotus Domino 8.5.2.0Ibm Lotus Domino 8.5.2.1Ibm Lotus Domino 8.5.1Ibm Lotus Domino 8.5.1.1Ibm Lotus Domino 8.5.2.2Ibm Lotus Domino 8.5.2.3Ibm Lotus Domino 8.5.2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook