CVE-2011-0912: IBM Lotus Notes

High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.

Affected products

• IBM Lotus Notes: version 8.0 only; version 8.0.1 only; version 8.0.2 only; version 8.0.2.0 only; version 8.0.2.1 only; version 8.0.2.2 only; …

Published 2011-02-08. Last modified 2026-06-16.