GCVE - cpe:2.3:a:ibm:lotus_domino:7.0.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:7.0.3:*:*:*:*:*:*:*

part: a version: 7.0.3 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Domino (`7030e5ee-c39c-5b5b-b087-3089d04acc96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1519`	vulnerable	2026-06-08 04:58:00.041997	Details available The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920. Published: 2011-03-25T19:00:00.000Z Updated: 2024-08-06T22:28:41.786Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-11-110 http://www.vupen.com/english/advisories/2011/0758 http://securitytracker.com/id?1025241 http://www.securityfocus.com/archive/1/517119/100/0/threaded http://secunia.com/advisories/43860	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0915`	vulnerable	2026-06-08 04:56:40.241203	Details available Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.595Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/516245/100/0/threaded http://secunia.com/advisories/43208 http://www-01.ibm.com/support/docview.wss?uid=swg21461514 http://zerodayinitiative.com/advisories/ZDI-11-048/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0914`	vulnerable	2026-06-08 04:56:40.239316	Details available Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.845Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-052/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0913`	vulnerable	2026-06-08 04:56:40.227284	Details available Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.818Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-053/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0927`	vulnerable	2026-06-08 04:54:04.100188	Details available Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920. Published: 2010-03-05T17:00:00.000Z Updated: 2024-09-16T19:31:44.522Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/38481 http://www.cybsec.com/vuln/CYBSEC_Advisory_2010_0301_IBM_%20Lotus_Dominio_Readme_nsf_Reflected_XSS.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.