Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*

part: a version: 8.0.2.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4823 vulnerable 2026-06-08 05:02:52.762826 Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4822 vulnerable 2026-06-08 05:02:52.759174 Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4821 vulnerable 2026-06-08 05:02:52.755644 Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4820 vulnerable 2026-06-08 05:02:52.687978 Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1519 vulnerable 2026-06-08 04:58:00.044203 Details available
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
Published: 2011-03-25T19:00:00.000Z
Updated: 2024-08-06T22:28:41.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1393 vulnerable 2026-06-08 04:57:58.789119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0915 vulnerable 2026-06-08 04:56:40.241344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0914 vulnerable 2026-06-08 04:56:40.239460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0913 vulnerable 2026-06-08 04:56:40.232086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3407 vulnerable 2026-06-08 04:55:14.417406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0276 vulnerable 2026-06-08 04:52:01.426073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0275 not_vulnerable 2026-06-08 04:52:01.423220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0274 not_vulnerable 2026-06-08 04:52:01.422234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.