9.3
CVE-2011-0912
- EPSS 1.71%
- Veröffentlicht 08.02.2011 22:00:02
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version8.0
Ibm ≫ Lotus Notes Version8.0.1
Ibm ≫ Lotus Notes Version8.0.2
Ibm ≫ Lotus Notes Version8.0.2.0
Ibm ≫ Lotus Notes Version8.0.2.1
Ibm ≫ Lotus Notes Version8.0.2.2
Ibm ≫ Lotus Notes Version8.0.2.3
Ibm ≫ Lotus Notes Version8.0.2.4
Ibm ≫ Lotus Notes Version8.0.2.5
Ibm ≫ Lotus Notes Version8.5.0.0
Ibm ≫ Lotus Notes Version8.5.0.1
Ibm ≫ Lotus Notes Version8.5.1.0
Ibm ≫ Lotus Notes Version8.5.1.1
Ibm ≫ Lotus Notes Version8.5.1.2
Ibm ≫ Lotus Notes Version8.5.1.3
Ibm ≫ Lotus Notes Version8.5.1.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.71% | 0.806 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.