PatchTheCVElotus vulnerabilities
Recent CVEs affecting lotus products. 20 tracked.
lotus has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2003-12-31. Highest priority: CVE-2001-0846 (score 60/100).
- CVE-2003-1408 MEDIUM 5.0 DOWNGRADE Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request
- CVE-2002-2191 MEDIUM 5.0 DOWNGRADE Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attack
- CVE-2002-1010 HIGH 7.5 UPGRADE Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP re
- CVE-2002-0408 MEDIUM 5.0 UPGRADE htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remo
- CVE-2002-0407 MEDIUM 5.0 UPGRADE htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathn
- CVE-2002-0245 HIGH 7.5 DOWNGRADE Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of
- CVE-2002-0087 LOW 2.1 DOWNGRADE bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on
- CVE-2001-1161 HIGH 7.5 DOWNGRADE Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on ot
- CVE-2001-1018 MEDIUM 5.0 DOWNGRADE Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when N
- CVE-2001-0954 MEDIUM 5.0 DOWNGRADE Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of servic
- CVE-2001-0939 MEDIUM 5.0 DOWNGRADE Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL c
- CVE-2001-0847 HIGH 7.5 DOWNGRADE Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default nav
- CVE-2001-0846 HIGH 10.0 DOWNGRADE Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID o
- CVE-2001-0604 MEDIUM 5.0 UPGRADE Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb)
- CVE-2001-0603 MEDIUM 5.0 UPGRADE Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending l
- CVE-2001-0602 MEDIUM 5.0 UPGRADE Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL
- CVE-2001-0601 MEDIUM 5.0 UPGRADE Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests contai
- CVE-2001-0600 MEDIUM 5.0 UPGRADE Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL request
- CVE-2001-0260 HIGH 7.5 UPGRADE Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or
- CVE-2000-1203 MEDIUM 5.0 DOWNGRADE Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumpti
FAQ
How do I fix lotus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lotus being exploited right now?
None of the tracked lotus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lotus CVE should I patch first?
CVE-2001-0846 currently ranks highest (60/100): Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID o.