Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*

part: a version: 8.0.2.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4823 vulnerable 2026-06-08 05:02:52.762843 Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4822 vulnerable 2026-06-08 05:02:52.759189 Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4821 vulnerable 2026-06-08 05:02:52.755663 Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4820 vulnerable 2026-06-08 05:02:52.688558 Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1519 vulnerable 2026-06-08 04:58:00.044221 Details available
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
Published: 2011-03-25T19:00:00.000Z
Updated: 2024-08-06T22:28:41.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1393 vulnerable 2026-06-08 04:57:58.790042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0915 vulnerable 2026-06-08 04:56:40.241360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0914 vulnerable 2026-06-08 04:56:40.239476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0913 vulnerable 2026-06-08 04:56:40.232640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3407 vulnerable 2026-06-08 04:55:14.417936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0921 not_vulnerable 2026-06-08 04:54:04.061701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0920 not_vulnerable 2026-06-08 04:54:04.060883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0919 not_vulnerable 2026-06-08 04:54:04.059966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0918 not_vulnerable 2026-06-08 04:54:04.052567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.