Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*

part: a version: 8.5.2.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductNotes (d298b434-3aab-53ea-bf48-4ff0b94cd8f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1437 vulnerable 2026-06-08 05:11:18.191430 Details available
HIGH (7.8)
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Published: 2018-03-14T00:00:00.000Z
Updated: 2024-09-16T19:46:06.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1435 vulnerable 2026-06-08 05:11:18.188812 Details available
HIGH (7.8)
IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.
Published: 2018-03-14T00:00:00.000Z
Updated: 2024-09-17T01:31:06.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1411 vulnerable 2026-06-08 05:11:18.017429 Details available
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138710.
Published: 2018-02-19T14:00:00.000Z
Updated: 2024-09-17T01:51:25.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1410 vulnerable 2026-06-08 05:11:18.016531 Details available
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709.
Published: 2018-02-19T14:00:00.000Z
Updated: 2024-09-16T17:23:55.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1409 vulnerable 2026-06-08 05:11:18.012049 Details available
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708.
Published: 2018-02-19T14:00:00.000Z
Updated: 2024-09-16T19:20:33.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.