IBM Lotus Notes Client vulnerabilities

3 CVEs affecting IBM Lotus Notes Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0179, published 2003-04-02.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0122, published 2003-03-18. Medium severity, CVSS 5.0. EPSS: 10.1% chance of exploitation in the next 30 days. Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC…
• CVE-2003-0179, published 2003-04-02. High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days. Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the…
• CVE-2003-0123, published 2003-03-18. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.