Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

12 records in Notes · all components

TI-2018-01321 CVE-2018-1435 · GHSA-cfv4-gmqg-xxm6

Untrusted search path in IBM Notes

Priority LOW 39

IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02468 Published 2018-03-14 No fix listed CWE-426
TI-2018-01322 CVE-2018-1437 · GHSA-x3h5-3jh8-247m

Untrusted search path in IBM Notes

Priority LOW 38

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02248 Published 2018-03-14 No fix listed CWE-426
TI-2018-01561 CVE-2018-1771 · GHSA-rjx5-p3j3-5qj8

Memory corruption in IBM Domino

Priority LOW 37

IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.00482 Published 2018-12-20 No fix listed CWE-119
Priority LOW 36

IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01062 Published 2018-02-13 No fix listed CWE-426
Priority LOW 24

IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00414 Published 2018-02-13 No fix listed CWE-77
Open these records in search →