IBM Lotus Domino Server vulnerabilities

8 CVEs affecting IBM Lotus Domino Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-7253, published 2010-01-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0986, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 7% chance of exploitation in the next 30 days. NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash)…
CVE-2005-1101, published 2005-05-02. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data…
CVE-2006-0580, published 2006-02-08. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP).
CVE-2002-0037, published 2002-04-22. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses…
CVE-2008-7253, published 2010-01-25. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and…
CVE-2002-2025, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device…
CVE-1999-0729, published 2001-03-12. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
CVE-2001-1567, published 2001-12-31. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request…