CVE-2017-1720: IBM Client Application Access

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807.

Affected products

• IBM Client Application Access: version 1.0.1.0 only; version 1.0.1.1 only; version 1.0.1.2 only
• IBM Notes: version 8.5.0.0 only; version 8.5.1.0 only; version 8.5.2.0 only; version 8.5.3.0 only; version 9.0.0.0 only; version 9.0.1.0 only

Published 2018-02-13. Last modified 2026-06-17.