Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Domino Web Access
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-0276 1 Ibm 3 Domino Web Access, Lotus Domino, Lotus Inotes 2023-12-10 10.0 HIGH N/A
IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.
CVE-2010-0919 1 Ibm 3 Domino Web Access, Lotus Domino, Lotus Inotes 2023-12-10 7.6 HIGH N/A
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
CVE-2009-3105 1 Ibm 1 Domino Web Access 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC.
CVE-2007-4474 1 Ibm 2 Domino Web Access, Lotus Domino Web Access 2023-12-10 9.3 HIGH N/A
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.