Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:*

part: a version: 8.5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Notes Traveler (d4a2d988-791d-55e3-a4d2-191599f572bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5309 vulnerable 2026-06-08 05:02:56.112240 Details available
servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-17T03:02:50.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5308 vulnerable 2026-06-08 05:02:56.111727 Details available
Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-16T20:22:01.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5307 vulnerable 2026-06-08 05:02:56.111238 Details available
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-16T21:57:39.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4825 vulnerable 2026-06-08 05:02:52.814390 Details available
Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-16T23:56:40.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4823 vulnerable 2026-06-08 05:02:52.763810 Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4822 vulnerable 2026-06-08 05:02:52.760120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4821 vulnerable 2026-06-08 05:02:52.756703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4820 vulnerable 2026-06-08 05:02:52.719660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4553 vulnerable 2026-06-08 04:56:29.117935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4552 vulnerable 2026-06-08 04:56:29.117515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4551 vulnerable 2026-06-08 04:56:29.116980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4550 vulnerable 2026-06-08 04:56:29.116501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4549 vulnerable 2026-06-08 04:56:29.109633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4548 vulnerable 2026-06-08 04:56:29.109056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4547 vulnerable 2026-06-08 04:56:29.108382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4546 vulnerable 2026-06-08 04:56:29.107898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4545 vulnerable 2026-06-08 04:56:29.107307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4544 vulnerable 2026-06-08 04:56:29.105309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5035 vulnerable 2026-06-08 04:51:50.855377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5034 vulnerable 2026-06-08 04:51:50.854972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5033 vulnerable 2026-06-08 04:51:50.854520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5032 vulnerable 2026-06-08 04:51:50.853982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.