Vulnerabilities > IBM > Client Application Access > 1.0.1.0

DATE CVE VULNERABILITY TITLE RISK
2018-02-13 CVE-2017-1720 Command Injection vulnerability in IBM Client Application Access and Notes
IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC.
local
low complexity
ibm CWE-77
4.6
2018-02-13 CVE-2017-1714 Unspecified vulnerability in IBM Client Application Access and Notes
IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege.
local
low complexity
ibm
7.2
2018-02-13 CVE-2017-1711 Untrusted Search Path vulnerability in IBM Client Application Access and Notes
IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory.
network
ibm CWE-426
6.8