Lotus Inotes (Ibm) - vulnerabilities (CVEs)
21 CVEs, 0 in the last 30 days, 56 known versions, newest CVE from 2016-11-24. Vendor: Ibm.
CVEs of Lotus Inotes
- CVE-2016-0282 - CVSS 5.4 (medium), 2016-11-24: Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a…
- CVE-2014-0913 - CVSS 4.3 (medium), 2014-05-09: Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web…
- CVE-2013-4065 - CVSS 2.6 (low), 2013-12-21: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows…
- CVE-2013-4064 - CVSS 2.1 (low), 2013-12-21: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows…
- CVE-2013-4063 - CVSS 4.3 (medium), 2013-12-21: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web…
- CVE-2013-4068 - CVSS 7.1 (high), 2013-09-20: Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified…
- CVE-2013-0595 - CVSS 4.3 (medium), 2013-08-27: Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web…
- CVE-2013-0591 - CVSS 3.5 (low), 2013-08-27: Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web…
- CVE-2013-0590 - CVSS 3.5 (low), 2013-08-27: Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web…
- CVE-2013-0536 - CVSS 7.2 (high), 2013-06-21: ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local…
- CVE-2013-0525 - CVSS 1.5 (low), 2013-03-26: Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka…
- CVE-2012-5943 - CVSS 4.3 (medium), 2013-03-26: Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via…
- CVE-2012-2175 - CVSS 9.3 (critical), 2012-06-20: Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers…
- CVE-2010-0919 - CVSS 7.6 (high), 2010-03-03: Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0,…
- CVE-2010-0918 - CVSS 10 (critical), 2010-03-03: Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4…
- CVE-2010-0921 - CVSS 6.8 (medium), 2010-03-03: Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers…
- CVE-2010-0920 - CVSS 4.3 (medium), 2010-03-03: Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to…
- CVE-2010-0275 - CVSS 10 (critical), 2010-01-09: Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the…
- CVE-2010-0274 - CVSS 10 (critical), 2010-01-09: Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3…
- CVE-2009-4594 - CVSS 10 (critical), 2010-01-09: Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR…
- CVE-2010-0276 - CVSS 10 (critical), 2010-01-09: IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link…
