IBM Lotus Expeditor vulnerabilities
4 vulnerabilities
Known vulnerabilities in IBM Lotus Expeditor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2012-0187ibmlotus_expeditor
EPSS score1.60%
Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privileges via a Trojan horse DLL in the current working directory.CVE-2012-0191ibmlotus_expeditorEPSS score1.03%
The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.CVE-2012-0186ibmlotus_expeditorEPSS score1.58%
Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL.CVE-2017-1129ibmexpeditor+3EPSS score30.07%
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370.