CVE-2007-1675: ibm lotus_domino

EPSS trend

Probability

61.22%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 61.22% on 21-09-2026

21-09-202621-10-2026

EPSS score

61.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databasedoswindowsVerified
IBM Lotus Domino Server 6.5 - 'Username' Remote Denial of Service
Maturity: poc
exploit-databaseremotewindowsVerified
IBM Lotus Domino Server 6.5 - Remote Overflow
Maturity: weaponized
exploit-databaseremotewindowsVerified
Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow
Maturity: weaponized

References

8 links

www.securityfocus.com/bid/23173VDB EntryX Refsource BIDPatch
www.securityfocus.com/bid/23172VDB EntryX Refsource BID
secunia.com/advisories/24633Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33276VDB EntryX Refsource XF
www.securitytracker.com/id?1017823VDB EntryX Refsource SECTRACK
www.zerodayinitiative.com/advisories/ZDI-07-011.htmlX Refsource MISC
www-1.ibm.com/support/docview.wss?uid=swg21257028X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2007/1133VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2003-0122ibmlotus_domino+110.11%22y ago01-09-2004 04:00Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.CVE-2003-0123ibmlotus_domino+13.43%22y ago01-09-2004 04:00Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.CVE-2001-1567ibmlotus_domino+11.56%21y ago14-07-2005 04:00Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.CVE-2005-2712ibmlotus_domino3.05%20y ago15-02-2006 11:00The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (crash) via a long bind request, which triggers a null dereference.CVE-2005-2428ibmlotus_domino73.03%21y ago03-08-2005 04:00Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.CVE-2005-4819ibmlotus_domino1.41%19y ago29-12-2006 11:00Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

All vulnerabilities inlotus_domino

CVE-2007-1675: ibm lotus_domino

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References