Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:6.5.4.1:*:*:*:*:*:*:*

part: a version: 6.5.4.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0915 vulnerable 2026-06-08 04:56:40.241012 Details available
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0914 vulnerable 2026-06-08 04:56:40.239105 Details available
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0913 vulnerable 2026-06-08 04:56:40.220375 Details available
Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4819 vulnerable 2026-06-08 04:48:45.253335 Details available
Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2006-12-29T11:00:00.000Z
Updated: 2024-08-08T00:01:23.283Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.