Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

lotus mobile connect vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-4590
Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) prior to 6.1.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.2Ibm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile Connect 6.1.1
4.3
CVSSv2
CVE-2010-4592
The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect prior to 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote malicious users to ca...
Ibm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile Connect 6.1.1Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.2
5
CVSSv2
CVE-2010-4595
The Connection Manager in IBM Lotus Mobile Connect prior to 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote malicious users to bypass intended access restrictions via an HTTP request that contains a disallow...
Ibm Lotus Mobile Connect 6.1.1Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile Connect 6.1.2
4.4
CVSSv2
CVE-2010-4591
The Connection Manager in IBM Lotus Mobile Connect (LMC) prior to 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate malicious users to obtain access via an unat...
Ibm Lotus Mobile Connect 6.1.2Ibm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.1
4
CVSSv2
CVE-2010-4593
The Connection Manager in IBM Lotus Mobile Connect prior to 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ...
Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.2Ibm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile Connect 6.1.1
4.3
CVSSv2
CVE-2010-4594
The Connection Manager in IBM Lotus Mobile Connect prior to 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote malicious users to cause a denial of service (memory consumption and HTTP-AS hang) by making m...
Ibm Lotus Mobile ConnectIbm Lotus Mobile Connect 6.1.2Ibm Lotus Mobile Connect 6.1.1.1Ibm Lotus Mobile Connect 6.1.1
4.3
CVSSv2
CVE-2011-4465
Cross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote malicious users to inject arbitrary web script or HTML via vectors related to a hidden redirect URL.
Ibm Lotus Mobile Connect 6.1.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook