Skip to content
Sign in
7.8 High

CVE-2018-1437 IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to…

Description

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.

Affected products and versions

Product Affected versions Fixed in
Notes 9.0 9.0 → 9.0.1.9 No fix stated
Notes 8.5 8.5 → 8.5.3.6 No fix stated

Other CVEs of Notes

The 10 CVEs of Notes →
CVE-2018-1435 IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack 7.8 High CVE-2018-1409 IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on… Not rated CVE-2018-1410 IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on… Not rated CVE-2018-1411 IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on… Not rated
Track this CVE