Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-2174

high · 9.3

The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.

9.3
CVSS
38.3%
EPSS (exploit prob.)
98th
EPSS percentile
2012-06-20
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
ibmlotus_notes8.0
ibmlotus_notes8.0.0
ibmlotus_notes8.0.1
ibmlotus_notes8.0.2
ibmlotus_notes8.0.2.0
ibmlotus_notes8.0.2.1
ibmlotus_notes8.0.2.2
ibmlotus_notes8.0.2.3
ibmlotus_notes8.0.2.4
ibmlotus_notes8.0.2.5
ibmlotus_notes8.0.2.6
ibmlotus_notes8.5
ibmlotus_notes8.5.0.0
ibmlotus_notes8.5.0.1
ibmlotus_notes8.5.1
ibmlotus_notes8.5.1.0
ibmlotus_notes8.5.1.1
ibmlotus_notes8.5.1.2
ibmlotus_notes8.5.1.3
ibmlotus_notes8.5.1.4
ibmlotus_notes8.5.1.5
ibmlotus_notes8.5.2.0
ibmlotus_notes8.5.2.1
ibmlotus_notes8.5.2.2
ibmlotus_notes8.5.2.3
ibmlotus_notes8.5.3
ibmlotus_notes8.5.3.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-2174