IBM Lotus Notes Traveler 8.5.3.3 Interim Fix 1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:interim_fix_1:*:*:*:*:*:*
part: a version: 8.5.3.3 update: interim_fix_1
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Lotus Notes Traveler (d4a2d988-791d-55e3-a4d2-191599f572bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-5309 |
vulnerable | 2026-06-08 05:02:56.112432 |
Details available
servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-17T03:02:50.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5308 |
vulnerable | 2026-06-08 05:02:56.111917 |
Details available
Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action.
Published: 2012-10-08T10:00:00.000Z
Updated: 2024-09-16T20:22:01.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4823 |
vulnerable | 2026-06-08 05:02:52.763995 |
Details available
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:17.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4822 |
vulnerable | 2026-06-08 05:02:52.760299 |
Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4821 |
vulnerable | 2026-06-08 05:02:52.756888 |
Details available
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Published: 2013-01-11T00:00:00.000Z
Updated: 2024-08-06T20:50:16.927Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4820 |
vulnerable | 2026-06-08 05:02:52.726306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.