Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm lotus notes 8.5.0.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-4846
IBM Lotus Notes 8.5.x prior to 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and ...
Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.3.1Ibm Lotus Notes 8.5.3.2Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.5.2.1Ibm Lotus Notes 8.5.3
9.3
CVSSv2
CVE-2011-0912
Argument injection vulnerability in IBM Lotus Notes 8.0.x prior to 8.0.2 FP6 and 8.5.x prior to 8.5.1 FP5 allows remote malicious users to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PR...
Ibm Lotus Notes 8.0.1Ibm Lotus Notes 8.0Ibm Lotus Notes 8.0.2.5Ibm Lotus Notes 8.0.2.3Ibm Lotus Notes 8.0.2.4Ibm Lotus Notes 8.0.2Ibm Lotus Notes 8.0.2.0Ibm Lotus Notes 8.0.2.1Ibm Lotus Notes 8.0.2.2Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.1.4Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.5.1.2
4.3
CVSSv2
CVE-2010-4544
Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler prior to 8.5.1.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.0.1.3Ibm Lotus Notes Traveler 8.0.1.2Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.0.1Ibm Lotus Notes Traveler 8.0Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.0
5
CVSSv2
CVE-2010-4550
IBM Lotus Notes Traveler prior to 8.5.1.3 allows remote malicious users to cause a denial of service (sync failure) via a malformed document.
Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.0.1.3Ibm Lotus Notes Traveler 8.0.1Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.0.1.2Ibm Lotus Notes Traveler 8.0
4.3
CVSSv2
CVE-2012-4825
Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler prior to 8.5.3.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.
Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.1.3
3.5
CVSSv2
CVE-2010-4547
IBM Lotus Notes Traveler prior to 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users from a different Domino domain than the Traveler server, which allows remote authenticated users to bypass intended access restrictions by u...
Ibm Lotus Notes Traveler 8.0Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.0.1.3Ibm Lotus Notes Traveler 8.0.1Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.0.1.2
9.3
CVSSv2
CVE-2012-6349
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x prior to 8.5.3 FP4, allows remote malicious users to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
Ibm Lotus Notes 8.5.2.2Ibm Lotus Notes 8.5Ibm Lotus Notes 8.5.3.3Ibm Lotus Notes 8.5.3.2Ibm Lotus Notes 8.5.2.0Ibm Lotus Notes 8.5.2.1Autonomy Keyview Idol -Ibm Lotus Notes 8.5.1.1Ibm Lotus Notes 8.5.1.0Ibm Lotus Notes 8.5.1.2Ibm Lotus Notes 8.5.0.0Ibm Lotus Notes 8.5.3Ibm Lotus Notes 8.5.1Ibm Lotus Notes 8.5.0.1Ibm Lotus Notes 8.5.1.3Ibm Lotus Notes 8.5.3.1Ibm Lotus Notes 8.5.2.3Ibm Lotus Notes 8.5.1.5Ibm Lotus Notes 8.5.1.4
6.8
CVSSv2
CVE-2012-5308
Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler up to and including 8.5.3.3 Interim Fix 1 allows remote malicious users to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem ...
Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.3.3Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.3.2Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes Traveler 8.5.1.2
6.8
CVSSv2
CVE-2012-5309
servlet/traveler in IBM Lotus Notes Traveler up to and including 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote malicious users to obtain access via a brute-force attack.
Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.3.2Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.3.3Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.1.1
2.6
CVSSv2
CVE-2012-5307
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler prior to 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote malicious users to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-20...
Ibm Lotus Notes Traveler 8.5.2.1Ibm Lotus Notes Traveler 8.5.0.0Ibm Lotus Notes Traveler 8.5.1.2Ibm Lotus Notes Traveler 8.5.3Ibm Lotus Notes Traveler 8.5.0.1Ibm Lotus Notes Traveler 8.5.3.1Ibm Lotus Notes Traveler 8.5.1.1Ibm Lotus Notes TravelerIbm Lotus Notes Traveler 8.5.0.2Ibm Lotus Notes Traveler 8.5.1.3Ibm Lotus Notes Traveler 8.5.3.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook