Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1519 vulnerable 2026-06-08 04:58:00.037670 Details available
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
Published: 2011-03-25T19:00:00.000Z
Updated: 2024-08-06T22:28:41.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0915 vulnerable 2026-06-08 04:56:40.241089 Details available
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0914 vulnerable 2026-06-08 04:56:40.239207 Details available
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0913 vulnerable 2026-06-08 04:56:40.223236 Details available
Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T22:05:54.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0927 vulnerable 2026-06-08 04:54:04.082170 Details available
Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920.
Published: 2010-03-05T17:00:00.000Z
Updated: 2024-09-16T19:31:44.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0358 vulnerable 2026-06-08 04:52:01.959907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2240 vulnerable 2026-06-08 04:50:23.307838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0243 vulnerable 2026-06-08 04:50:10.580940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5924 vulnerable 2026-06-08 04:50:07.256159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5701 vulnerable 2026-06-08 04:50:06.752720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5700 vulnerable 2026-06-08 04:50:06.750667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3510 vulnerable 2026-06-08 04:49:54.131944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1739 vulnerable 2026-06-08 04:49:43.350686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1675 vulnerable 2026-06-08 04:49:43.218980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0068 vulnerable 2026-06-08 04:49:31.378895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5818 vulnerable 2026-06-08 04:49:21.349344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4843 vulnerable 2026-06-08 04:49:18.984449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2712 vulnerable 2026-06-08 04:48:30.362547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.