Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm lotus notes 8.5.2.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-4846
IBM Lotus Notes 8.5.x prior to 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and ...
Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.3.1Ibm Lotus Notes 8.5.3.2Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.5.2.1Ibm Lotus Notes 8.5.3
4.3
CVSSv2
CVE-2012-4825
Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler prior to 8.5.3.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.
Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.1.3
9.3
CVSSv2
CVE-2012-6349
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x prior to 8.5.3 FP4, allows remote malicious users to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.5Ibm Lotus Notes 8.5.3.3Ibm Lotus Notes 8.5.3.2Ibm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.5.2.1Autonomy Keyview Idol -Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.3Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.3.1Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.4
2.6
CVSSv2
CVE-2012-5307
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler prior to 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote malicious users to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-20...
Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.3.2
6.8
CVSSv2
CVE-2012-5308
Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler up to and including 8.5.3.3 Interim Fix 1 allows remote malicious users to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem ...
Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.3.3Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.3.2Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.1.2
6.8
CVSSv2
CVE-2012-5309
servlet/traveler in IBM Lotus Notes Traveler up to and including 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote malicious users to obtain access via a brute-force attack.
Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.3.2Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.3.3Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.1.1
9.3
CVSSv2
CVE-2012-2174
The URL handler in IBM Lotus Notes 8.x prior to 8.5.3 FP2 allows remote malicious users to execute arbitrary code via a crafted notes:// URL.
Ibm Lotus Notes 8.0Ibm Lotus Notes 8.5.3Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.0.0Ibm Lotus Notes 8.0.2.2Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.0.2.3Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.0.2.0Ibm Lotus Notes 8.0.2.1Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.0.1Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.2.1Ibm Lotus Notes 8.5.3.1Ibm Lotus Notes 8.5.2.2
4.3
CVSSv2
CVE-2013-0538
Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote malicious users to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49.
Ibm Lotus Notes 8.5.3Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.5Ibm Lotus Notes 8.0.2.2Ibm Lotus Notes 8.0.2.3Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.0.2.1Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.0.1Ibm Lotus Notes 8.0.2.4Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.2.1Ibm Lotus Notes 8.5.3.2Ibm Lotus Notes 8.0.2Ibm Lotus Notes 8.0Ibm Lotus Notes 8.0.2.5Ibm Lotus Notes 8.0.0Ibm Lotus Notes 8.0.2.6Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.3.3
5.8
CVSSv2
CVE-2013-0127
IBM Lotus Notes 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote malicious users to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message...
Ibm Lotus Notes 8.5.3Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.0.0Ibm Lotus Notes 8.0.2.2Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.0.2Ibm Lotus Notes 8.0Ibm Lotus Notes 8.0.2.4Ibm Lotus Notes 8.0.2.5Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.0.2.6Ibm Lotus Notes 8.5.3.3Ibm Lotus Notes 9.0.0.0Ibm Lotus Notes 8.0.2.1Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.0.1Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.2.1
9.3
CVSSv2
CVE-2011-1215
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes prior to 8.5.2 FP3, allows remote malicious users to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.5Ibm Lotus Notes 8.0.2.6Ibm Lotus Notes 8.0.2Ibm Lotus Notes 8.0.1Ibm Lotus Notes 7.0Ibm Lotus Notes 7.0.2.1Ibm Lotus NotesIbm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.0.2.1Ibm Lotus Notes 8.0.2.0Ibm Lotus Notes 7.0.1Ibm Lotus Notes 7.0.0Ibm Lotus Notes 7.0.4.2Ibm Lotus Notes 7.0.1.1Ibm Lotus Notes 8.5.2.1Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.0.2.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook