GCVE - cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*

part: a version: 8.5.2.4 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Inotes (`9b84080f-1fd7-504f-9b1f-e9009eb3864e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1421`	vulnerable	2026-06-08 05:09:22.047719	Details available IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Published: 2017-12-13T18:00:00.000Z Updated: 2024-09-17T03:28:55.366Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/102153 http://www.ibm.com/support/docview.wss?uid=swg22005234 http://www.securitytracker.com/id/1040015 https://exchange.xforce.ibmcloud.com/vulnerabilities/127411	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1332`	vulnerable	2026-06-08 05:09:21.783526	Details available IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234. Published: 2017-07-31T21:00:00.000Z Updated: 2024-09-16T17:33:16.656Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22005233 https://exchange.xforce.ibmcloud.com/vulnerabilities/126234 http://www.securityfocus.com/bid/100028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1327`	vulnerable	2026-06-08 05:09:21.777000	Details available IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062. Published: 2017-08-03T15:00:00.000Z Updated: 2024-09-16T22:16:08.098Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22003664 https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 http://www.securityfocus.com/bid/100139	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1130`	vulnerable	2026-06-08 05:09:13.085191	Details available IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371. Published: 2017-09-05T21:00:00.000Z Updated: 2024-09-16T21:58:13.936Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/121371 http://www.ibm.com/support/docview.wss?uid=swg21999384 https://www.exploit-db.com/exploits/42604/ http://www.securityfocus.com/bid/100632	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1129`	vulnerable	2026-06-08 05:09:13.078591	Details available IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370. Published: 2017-09-05T21:00:00.000Z Updated: 2024-09-16T16:38:43.778Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/42602/ http://www.ibm.com/support/docview.wss?uid=swg21999385 https://exchange.xforce.ibmcloud.com/vulnerabilities/121370 http://www.ibm.com/support/docview.wss?uid=swg22002103	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.