IBM Lotus Quickr vulnerabilities

19 CVEs affecting IBM Lotus Quickr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2176, published 2012-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2176, published 2012-05-25. High severity, CVSS 9.3. EPSS: 31.6% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long…
CVE-2010-0714, published 2010-02-26. Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0…
CVE-2011-1505, published 2011-03-22. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and attack vectors, aka SPR ESEO8DQME2.
CVE-2008-4505, published 2008-10-09. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow attackers to cause a denial of service (system crash) via a "nonstandard URL argument" to the OpenDocument…
CVE-2010-0715, published 2010-02-26. Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days. Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through…
CVE-2009-3453, published 2009-09-29. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt…
CVE-2008-3860, published 2008-08-29. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (4) in the HTML import, (5) in the Rich text editor, and…
CVE-2008-2163, published 2008-05-13. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via…
CVE-2008-4507, published 2008-10-09. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to delete pages that were created by a different author via unknown vectors.
CVE-2008-4506, published 2008-10-09. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to "demote or delete a place superuser group" via unknown vectors.

Latest

CVE-2009-5062, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service (daemon crash) by subscribing to an Atom feed, aka SPR JRIE7VKMP9.
CVE-2009-5061, published 2011-03-22. Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of…
CVE-2009-5060, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by accessing an entry in…
CVE-2009-5059, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by checking out a…
CVE-2009-5058, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by deleting an item that is…
CVE-2008-7286, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service (daemon crash)…
CVE-2008-7285, published 2011-03-22. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service (daemon…
CVE-2008-7284, published 2011-03-22. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QCAO7E6AM8.