IBM Lotus Domino Enterprise Server vulnerabilities

6 CVEs affecting IBM Lotus Domino Enterprise Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-0121, published 2006-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0119, published 2006-01-09. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1)…
CVE-2005-3015, published 2005-09-21. Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.
CVE-2006-0117, published 2006-01-09. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to MIME Conversion".
CVE-2006-0118, published 2006-01-09. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash)…
CVE-2006-0121, published 2006-01-09. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified…
CVE-2006-0120, published 2006-01-09. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed…