Lotus

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Lotus records in CISA KEV

No Lotus vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Domino Server · all components

TI-2001-00009 CVE-2001-0009 · GHSA-q36p-w7jg-6243

LOW 35

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09336 Published 2001-05-07 No fix listed

TI-2003-01308 CVE-2003-1408 · GHSA-4747-c4gm-2j5q

LOW 26

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2007-10-20 No fix listed CWE-200

TI-2000-00023 CVE-2000-0023 · GHSA-vw4w-mhg2-58rj

LOW 26

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01396 Published 2000-03-22 No fix listed

TI-2000-00021 CVE-2000-0021 · GHSA-8mqc-9m8w-hh4w

LOW 26

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01359 Published 2000-02-04 No fix listed

TI-2000-00022 CVE-2000-0022 · GHSA-397r-7mqg-j52j

LOW 25

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01138 Published 2000-03-22 No fix listed