IBM Lotus Notes Traveler vulnerabilities

25 CVEs affecting IBM Lotus Notes Traveler, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0536, published 2013-06-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4822, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4821, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4823, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2012-4820, published 2013-01-11. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2010-4552, published 2010-12-16. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon outage) by sending many embedded objects in e-mail messages…
CVE-2010-4551, published 2010-12-16. Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days. IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person…
CVE-2010-4548, published 2010-12-16. Low severity, CVSS 2.1. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (daemon crash) by accepting a meeting invitation with an iNotes client and then accepting this…
CVE-2010-4553, published 2010-12-16. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service (daemon crash) via unspecified…
CVE-2010-4550, published 2010-12-16. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document.
CVE-2012-5309, published 2012-10-08. Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days. servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via…

Latest

CVE-2013-0536, published 2013-06-21. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that…
CVE-2012-5308, published 2012-10-08. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users…
CVE-2012-5307, published 2012-10-08. Low severity, CVSS 2.6. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or…
CVE-2012-4825, published 2012-10-08. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via…
CVE-2012-4824, published 2012-10-08. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing…