IBM Domino Web Access vulnerabilities

4 CVEs affecting IBM Domino Web Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0919, published 2010-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4474, published 2007-12-27. High severity, CVSS 9.3. EPSS: 44.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote…
CVE-2010-0919, published 2010-03-03. High severity, CVSS 7.6. EPSS: 5.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2…
CVE-2009-3105, published 2009-09-08. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2010-0276, published 2010-01-09. High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an…