CVE-2018-1437

CVSS 7.8 HIGHEPSS 2.3%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.8EPSS 2.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Mar 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.

CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:R

Affected products

IBM · Notes

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/139565 http://www.ibm.com/support/docview.wss?uid=swg22014201 http://www.securityfocus.com/bid/103401 http://www.securitytracker.com/id/1040563