Ibm

Lotus Domino Web Access

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2007-4474

Exploit
  • EPSS 87.47%
  • Published 27.12.2007 22:46:00
  • Last modified 09.04.2025 00:30:58

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an...

7.5

CVE-2006-4763

  • EPSS 1.64%
  • Published 13.09.2006 23:07:00
  • Last modified 03.04.2025 01:03:51

IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.