Ibm Lotus Domino vulnerabilities

80 known vulnerabilities affecting ibm/lotus_domino.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL18HIGH14MEDIUM40LOW8

Vulnerabilities

SortPage 4 of 4

CVE-2013-5388P4MEDIUMCVSS 4.3v8.5.3.0v9.0.0.02013-10-22

CVE-2013-5388 [MEDIUM] CWE-79 CVE-2013-5388: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F.

nvd

CVE-2013-0488P4MEDIUMCVSS 4.3v8.5.0v8.5.0.1+14 more2013-03-27

CVE-2013-0488 [MEDIUM] CWE-79 CVE-2013-0488: Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM D Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2010-0927P4MEDIUMCVSS 4.3v7.0v7.0.1+9 more2010-03-05

CVE-2010-0927 [MEDIUM] CVE-2010-0927: Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotu Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.

nvd

CVE-2013-4063P4MEDIUMCVSS 4.3v8.5.3.0v8.5.3.1+5 more2013-12-21

CVE-2013-4063 [MEDIUM] CWE-79 CVE-2013-4063: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x be Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP.

nvd

CVE-2012-4844P4MEDIUMCVSS 4.3v8.5.0v8.5.0.1+12 more2013-02-27

CVE-2012-4844 [MEDIUM] CWE-79 CVE-2012-4844: Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 a Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2011-3576P4MEDIUMCVSS 4.3v8.5.22011-09-19

CVE-2011-3576 [MEDIUM] CWE-79 CVE-2011-3576: Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf.

nvd

CVE-2006-0120P4MEDIUMCVSS 5.0v6.5.0v6.5.1+3 more2006-01-09

CVE-2006-0120 [MEDIUM] CVE-2006-0120: Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attacke Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attach

nvd

CVE-2006-4843P4MEDIUMCVSS 4.3v6.5.0v6.5.1+7 more2007-03-29

CVE-2006-4843 [MEDIUM] CVE-2006-4843: Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino be Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.

nvd

CVE-2007-5924P4MEDIUMCVSS 4.3≤ 6.5.6v7.0+1 more2007-11-10

CVE-2007-5924 [MEDIUM] CWE-79 CVE-2007-5924: Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6. Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2012-3302P4MEDIUMCVSS 4.3v7.0.1v7.0.1.1+22 more2012-08-21

CVE-2012-3302 [MEDIUM] CWE-79 CVE-2012-3302: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 all Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.

nvd

CVE-2000-1215P4MEDIUMCVSS 5.0v5.0.82001-09-19

CVE-2000-1215 [MEDIUM] CVE-2000-1215: The default configuration of Lotus Domino server 5.0.8 includes system information (version, operati The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.

nvd

CVE-2013-4055P4LOWCVSS 3.5v8.5.0v9.0.0.02013-11-08

CVE-2013-4055 [LOW] CVE-2013-4055: Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8 Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051.

nvd

CVE-2013-4051P4LOWCVSS 3.5v8.5.0v9.0.0.02013-11-08

CVE-2013-4051 [LOW] CWE-79 CVE-2013-4051: Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8 Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055.

nvd

CVE-2013-0590P4LOWCVSS 3.5v8.5.0v8.5.0.1+16 more2013-08-27

CVE-2013-0590 [LOW] CWE-79 CVE-2013-0590: Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 al Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0591.

nvd

CVE-2013-0591P4LOWCVSS 3.5v8.5.0v8.5.0.1+16 more2013-08-27

CVE-2013-0591 [LOW] CVE-2013-0591: Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 al Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0590.

nvd

CVE-2002-2014P4MEDIUMCVSS 5.0v5.0.82002-12-31

CVE-2002-2014 [MEDIUM] CVE-2002-2014: Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provi Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.

nvd

CVE-2004-0029P4MEDIUMCVSS 4.6v6.0.22004-01-20

CVE-2004-0029 [MEDIUM] CVE-2004-0029: Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable perm Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.

nvd

CVE-2013-4065P4LOWCVSS 2.6v8.5.3.0v8.5.3.1+5 more2013-12-21

CVE-2013-4065 [LOW] CWE-79 CVE-2013-4065: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x be Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.

nvd

CVE-2013-4064P4LOWCVSS 2.1v8.5.3.0v8.5.3.1+5 more2013-12-21

CVE-2013-4064 [LOW] CWE-79 CVE-2013-4064: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x be Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.

nvd

CVE-2007-5701P4LOWCVSS 2.1v6.5.5v6.5.6+2 more2007-10-29

CVE-2007-5701 [LOW] CWE-200 CVE-2007-5701: Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0. Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password

nvd

← Previous4 / 4