Ibm Lotus Luki w zabezpieczeniach

Wersja

8.5.2	44
8.5.1	38
8.5.0	34
8.5.3	28
8.0	22

Przeciwdziałanie

Official Fix	242
Temporary Fix	0
Workaround	10
Unavailable	0
Not Defined	58

Wykorzystywanie

High	40
Functional	0
Proof-of-Concept	90
Unproven	20
Not Defined	160

Wektor dostępu

Not Defined	0
Physical	0
Local	24
Adjacent	6
Network	280

Uwierzytelnianie

Not Defined	0
High	0
Low	52
None	258

Interakcja z użytkownikiem

Not Defined	0
Required	72
None	238

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	26
≤5	58
≤6	84
≤7	22
≤8	62
≤9	6
≤10	52

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	36
≤5	70
≤6	68
≤7	64
≤8	12
≤9	20
≤10	38

VulDB

≤1	0
≤2	0
≤3	0
≤4	26
≤5	58
≤6	84
≤7	22
≤8	60
≤9	8
≤10	52

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	2
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	2
<5k	4
<10k	100
<25k	110
<50k	90
<100k	4
≥100k	0

Wykorzystaj dzisiaj

<1k	282
<2k	6
<5k	10
<10k	8
<25k	4
<50k	0
<100k	0
≥100k	0

Affected Versions (168): 1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.3.0.20090908.09, 1.4, 2.0, 2.0.1, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.8.1, 3, 3.0, 3.0.0.1, 3.0.1, 3.1, 3.1.0.1, 3.1.0.2, 3.1.0.3, 3.1.0.4, 3.1.0.5, 3.1.0.6, 3.1.0.7, 3.1.0.8, 3.1.0.9, 3.1.0.11, 3.1.0.12, 3.1.0.13, 3.1.0.14, 3.1.0.15, 3.1.0.16, 3.1.0.17, 3.1.0.18, 3.1.0.19, 3.1.0.21, 3.1.0.22, 3.1.0.23, 3.1.0.24, 3.1.0.25, 4.5, 4.6, 5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.9a, 5.0.12, 5.02, 6, 6.0, 6.0.1, 6.0.1.1, 6.0.1.2, 6.0.1.3, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.1, 6.1.1, 6.1.2, 6.1.4, 6.2, 6.2.1, 6.2.2, 6.3, 6.4, 6.5, 6.5.1, 6.5.1 Fp1, 6.5.2, 6.5.3, 6.5.4, 6.5.4 FP2, 6.5.5, 7, 7.0, 7.0.1, 7.0.1.1, 7.0.2, 7.0.3, 7.1, 7.1.1.119, 7.2, 7.3, 7.4, 7.5, 8.0, 8.0.1, 8.0.2, 8.0.2.1, 8.1, 8.2, 8.3, 8.4, 8.5, 8.5.0.1, 8.5.0.2, 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.1.5, 8.5.2, 8.5.2.1, 8.5.2.4, 8.5.3, 8.5.3 FP6, 8.5.3.6, 8.5.4, 9.0, 9.0.1, 9.0.1 FP3, 9.0.1.5, 9.0.1.6, 229, 229.0, 229.1, 229.2, 229.3, 229.4, 229.5, 229.6, 229.7, 229.8, 229.9, 229.10, 229.11, 229.12, 229.13, 229.14, 229.15, 229.16, 229.17, 229.18, 229.19, 229.20, 229.210, 229.260, Quickr, R4.5 R6, R5, R5 5.0, R5.0.1, R5.0.2, R5.0.3, R5.0.4, R5.0.5, R5.0.6, R5.0.7, R5.0.8, R5.0.9, R6.0, r5.0.7a

Link to Product Website: https://www.ibm.com/

Typ oprogramowania: Groupware Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2016-12-01	5.4	5.2	IBM Lotus Protector for Mail Security cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2991
2016-07-01	7.5	7.2	IBM Lotus Notes information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-3674
2016-06-07	8.0	7.7	IBM Lotus Domino Keyview PDF memory corruption	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-0301
2016-06-07	8.0	7.7	IBM Lotus Domino Keyview PDF privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-0279
2016-06-07	8.0	7.7	IBM Lotus Domino Keyview PDF privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-0278
2016-06-07	8.0	7.7	IBM Lotus Domino Keyview PDF privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-0277
2015-10-22	7.3	7.0	IBM Lotus Domino GIF Image memory corruption	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-5040
2015-10-22	7.3	7.0	IBM Lotus Domino GIF Image memory corruption	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2015-4994
2015-06-19	3.5	3.4	IBM Lotus Domino Web Server WebMail cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2015-1981
2014-04-23	5.3	5.1	IBM Lotus Domino information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-0892
2014-03-25	7.5	7.2	IBM Lotus Protector for Mail Security privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-0887
2014-03-25	7.5	7.2	IBM Lotus Protector for Mail Security Access Restriction privilege escalation	$5k-$25k	Obliczenie	Not Defined	Official Fix	0.00	CVE-2014-0886
2014-03-25	6.3	6.0	IBM Lotus Protector for Mail Security cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-0885
2014-03-25	3.5	3.4	IBM Lotus Protector for Mail Security cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-0884
2014-01-29	7.3	7.0	IBM Lotus Quickr for Domino ActiveX Control qp2.cab memory corruption	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-6749
2014-01-29	7.3	7.0	IBM Lotus Quickr for Domino ActiveX Control qp2.cab memory corruption	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-6748
2013-12-31	5.5	5.0	IBM Lotus Notes Traveler cross site request forgery	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00
2013-11-08	4.3	3.8	IBM Lotus Sametime Enterprise Meeting Server Domain Variable Application Cookie privilege escalation	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00	CVE-2013-3985
2013-11-08	4.3	4.1	IBM Lotus Sametime Enterprise Meeting Server Link privilege escalation	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2013-0537
2013-11-08	3.7	3.2	IBM Lotus Sametime Enterprise Meeting Server Link Library privilege escalation	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00	CVE-2013-3045
2013-11-08	5.3	4.6	IBM Lotus Sametime Enterprise Meeting Server Chat privilege escalation	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2013-3044
2013-11-07	5.3	4.6	IBM Lotus Sametime WebPlayer Sametime Audio Visual memory corruption	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2013-3986
2013-07-18	10.0	9.5	IBM Lotus Notes Parser memory corruption	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-6349
2013-06-16	10.0	9.5	IBM Lotus Quickr for Domino ActiveX Control qp2.cab memory corruption	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-3026
2013-05-06	7.3	7.0	IBM Lotus Notes PNG Image Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-2977