IBM Lotus Domino Web Server vulnerabilities

6 CVEs affecting IBM Lotus Domino Web Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2410, published 2008-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0178, published 2003-04-02. High severity, CVSS 10.0. EPSS: 14.9% chance of exploitation in the next 30 days. Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields…
CVE-2007-0067, published 2007-06-06. High severity, CVSS 7.8. EPSS: 13.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that…
CVE-2003-0179, published 2003-04-02. High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days. Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the…
CVE-2003-0180, published 2003-04-02. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
CVE-2003-0181, published 2003-04-02. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a…
CVE-2008-2410, published 2008-05-22. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote authenticated…