Lotus Domino Security Vulnerabilities and Issues — Lotus Domino CVE List

Lucene search

IbmLotus Domino

4 matches found

CVE•added 2013/03/27 12:23 p.m.•41 views

CVE-2013-0488

Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.6AI score0.00236EPSS

CVE•added 2013/03/27 12:23 p.m.•40 views

CVE-2013-0486

Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.

4.3CVSS6.6AI score0.00681EPSS

CVE•added 2013/03/27 12:23 p.m.•40 views

CVE-2013-0489

Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators.

6CVSS6.5AI score0.00093EPSS

CVE•added 2013/03/27 12:23 p.m.•36 views

CVE-2013-0487

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN.

8.5CVSS6.2AI score0.00459EPSS