IBM Lotus Domino Web Access vulnerabilities

2 CVEs affecting IBM Lotus Domino Web Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4474, published 2007-12-27.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-4474, published 2007-12-27. High severity, CVSS 9.3. EPSS: 44.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote…
• CVE-2006-4763, published 2006-09-13. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by…