domino · threatengine.sh

CVE-2024-23562

all versions

A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated at

5.3MEDIUM

CVE-2023-37539

all versions

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to e

8.4HIGH

CVE-2023-37495

>= 9.0 and < 14.0

Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Grou

5.9MEDIUM

CVE-2023-28010

all versions

In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attac

4.0MEDIUM

CVE-2015-10039

< 0.1.5524.38553

A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in

5.5MEDIUM

CVE-2022-44754

all versions

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a r

9.8CRITICAL

CVE-2022-44752

all versions

HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a

9.8CRITICAL

CVE-2022-44750

all versions

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a r

9.8CRITICAL

CVE-2022-38654

all versions

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search

5.5MEDIUM

CVE-2022-38660

< 9.0.1

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could e

8.3HIGH

CVE-2022-27558

all versions

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain

5.9MEDIUM

CVE-2022-27547

all versions

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user

6.1MEDIUM

CVE-2022-27546

all versions

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied i

8.3HIGH

CVE-2020-4107

all versions

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system

8.8HIGH

CVE-2020-14273

all versions

HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An

7.5HIGH

CVE-2020-14270

>= 9.0.0 and <= 10.0.0

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user

5.3MEDIUM

CVE-2020-4080

all versions

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message cont

6.1MEDIUM

CVE-2020-14244

>= 9.0.0 and < 10.0.1

A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthe

9.8CRITICAL

CVE-2020-14260

>= 9.0.0 and <= 9.0.1

HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit

9.8CRITICAL

CVE-2020-4128

>= 9.0.0 and <= 9.0.1

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use

5.3MEDIUM

CVE-2020-14234

< 9.0.1

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially givi

7.5HIGH

CVE-2020-14230

< 9.0.1

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unau

7.5HIGH

CVE-2017-1712

< 9.0.1

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access

5.9MEDIUM

CVE-2012-6277

>= 8.5.0 and <= 8.5.3.6

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchan

7.8HIGH

CVE-2018-1771

>= 9.0.1.0 and <= 9.0.1.10

IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing

8.4HIGH

CVE-2016-6087

all versions

IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino

9.8CRITICAL

CVE-2017-1274

all versions

IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker t

8.8HIGH

CVE-2016-0270

all versions

IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce ge

5.9MEDIUM

CVE-2016-6113

all versions

IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI

6.1MEDIUM

CVE-2016-5884

all versions