Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:8.5.2:*:*:*:*:*:*:*

part: a version: 8.5.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3576 vulnerable 2026-06-08 04:59:26.408088 Details available
Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf.
Published: 2011-09-17T10:00:00.000Z
Updated: 2024-08-06T23:37:48.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3575 vulnerable 2026-06-08 04:59:26.407611 Details available
Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
Published: 2011-09-17T10:00:00.000Z
Updated: 2024-08-06T23:37:48.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1519 vulnerable 2026-06-08 04:58:00.047406 Details available
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
Published: 2011-03-25T19:00:00.000Z
Updated: 2024-08-06T22:28:41.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0915 vulnerable 2026-06-08 04:56:40.241498 Details available
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0914 vulnerable 2026-06-08 04:56:40.239618 Details available
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0913 vulnerable 2026-06-08 04:56:40.237218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.