Shortened for this page: results: 3 of 25 shown; results[].configurations[].nodes[].cpe_match: first 10 items; results[].enrichment.cpe: first 10 items
{
"page": 1,
"page_size": 25,
"result_count": 1222,
"results": [
{
"id": "CVE-2014-2321",
"source_identifier": "user@mitre.org",
"published": "2014-03-11T13:01:19Z",
"last_modified": "2026-06-17T00:06:24Z",
"status": "Modified",
"evaluator_comment": null,
"evaluator_solution": "Per: http://www.kb.cert.org/vuls/id/600724\n\n\" It has been reported that the web_shell_cmd.gch script is sometimes accessible from the WAN interface making exploitation of this backdoor from the Internet possible in certain cases. \"",
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using \"set TelnetCfg\" commands to enable a TELNET service with specified credentials."
},
{
"lang": "es",
"value": "web_shell_cmd.gch en los cable modems ZTE F460 y F660 permite a atacantes remotos obtener acceso administrativo a través de solicitudes sendcmd, tal y como fue demostrado por el uso de comandos \"set TelnetCfg\" para habilitar un servicio TELNET con credenciales especificadas."
}
],
"references": [
{
"url": "http://www.kb.cert.org/vuls/id/600724",
"source": "user@mitre.org",
"tags": [
"US Government Resource"
]
},
{
"url": "http://www.myxzy.com/post-411.html",
"source": "user@mitre.org",
"tags": null
},
{
"url": "https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor",
"source": "user@mitre.org",
"tags": [
"Exploit"
]
},
{
"url": "http://www.kb.cert.org/vuls/id/600724",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
]
},
{
"url": "http://www.myxzy.com/post-411.html",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": false,
"obtain_all_privilege": false,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"configurations": [
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:h:zte:f460:-:*:*:*:*:*:*:*",
"match_criteria_id": "49824822-DE3A-4CD2-B023-00CF5F2BCDE4",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:h:zte:f660:-:*:*:*:*:*:*:*",
"match_criteria_id": "45A2A8CC-474B-4575-933D-6168F043D296",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:h:zte:f460:-:*:*:*:*:*:*:*",
"vendor": "zte",
"product": "f460",
"product_type": "h",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null
},
{
"criteria": "cpe:2.3:h:zte:f660:-:*:*:*:*:*:*:*",
"vendor": "zte",
"product": "f660",
"product_type": "h",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null
}
],
"cwe": null,
"epss_score": {
"epss": 0.59259,
"percentile": 0.99076,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
},
{
"id": "CVE-2010-5290",
"source_identifier": "user@mitre.org",
"published": "2013-09-20T16:55:03Z",
"last_modified": "2026-06-16T23:26:29Z",
"status": "Modified",
"evaluator_comment": null,
"evaluator_solution": "The CVSS score reflects previously published information indicating successful exploitation allows SYSTEM access on certain operating systems.",
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861."
},
{
"lang": "es",
"value": "El proceso de autenticación en Adobe ColdFusion anteriores a v10 no requiere conocimiento de la contraseña en claro si el hash de la contraseña es conocido, lo cual facilita a atacantes dependientes del contexto obtener privilegios administrativos aprovechando el acceso de lectura al fichero de configuración, una vulnerabilidad distinta a CVE-2010-2861."
}
],
"references": [
{
"url": "http://osvdb.org/97553",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://qualys.immunityinc.com/home/exploitpack/CANVAS/CF_directory_traversal",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
"source": "user@mitre.org",
"tags": null
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87740",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://osvdb.org/97553",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "http://qualys.immunityinc.com/home/exploitpack/CANVAS/CF_directory_traversal",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87740",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": false,
"obtain_all_privilege": true,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-255"
}
]
}
],
"configurations": [
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
"match_criteria_id": "5BE8541C-7FDD-4E82-ADDA-7E2F44AAAF38",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": "9.0.2",
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*",
"match_criteria_id": "113431FB-E4BE-4416-800C-6B13AD1C0E92",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*",
"match_criteria_id": "7FBC38B4-D957-4645-BA96-E99975271482",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
"vendor": "adobe",
"product": "coldfusion",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": "9.0.2",
"version_end_excluding": null,
"affected_versions_first": "6.0",
"affected_versions_last": "9.0.2"
},
{
"criteria": "cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*",
"vendor": "adobe",
"product": "coldfusion",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "9.0",
"affected_versions_last": "9.0"
},
{
"criteria": "cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*",
"vendor": "adobe",
"product": "coldfusion",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "9.0.1",
"affected_versions_last": "9.0.1"
}
],
"cwe": null,
"epss_score": {
"epss": 0.05531,
"percentile": 0.92468,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
},
{
"id": "CVE-2010-0274",
"source_identifier": "user@mitre.org",
"published": "2010-01-09T18:30:01Z",
"last_modified": "2026-06-16T23:15:50Z",
"status": "Modified",
"evaluator_comment": null,
"evaluator_solution": "http://www-933.ibm.com/support/fixcentral/",
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5."
},
{
"lang": "es",
"value": "Vulnerabilidad sin especificar en Edit Contact scene en Ultra-light Mode en IBM Lotus iNotes (también conocido como Domino Web Access o DWA) anterior a v229.241 para Domino v8.0.2 FP3 tiene un impacto y vectores de ataque desconocidos, también conocido como SPR LSHR7TBLY5."
}
],
"references": [
{
"url": "http://secunia.com/advisories/38026",
"source": "user@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27017776",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://www.securityfocus.com/bid/37675",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://www.vupen.com/english/advisories/2010/0077",
"source": "user@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55470",
"source": "user@mitre.org",
"tags": null
},
{
"url": "http://secunia.com/advisories/38026",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27017776",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "http://www.securityfocus.com/bid/37675",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
},
{
"url": "http://www.vupen.com/english/advisories/2010/0077",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55470",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": null
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": true,
"obtain_all_privilege": false,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*",
"match_criteria_id": "4B327550-1809-4982-A927-48D3392B7A22",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": "229.231",
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:*",
"match_criteria_id": "62AF2DA6-98E4-4921-B36C-AA5771B3629E",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:*",
"match_criteria_id": "3CC0B87F-B742-466D-BF93-56BFECAC2E54",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:*",
"match_criteria_id": "708BEAEF-B186-470D-8148-9C0703B42765",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:*",
"match_criteria_id": "83C58751-33AE-4A3F-A096-AB13FC8A64A2",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:*",
"match_criteria_id": "01E2E70E-3C00-4AA2-AF8D-349E82806FA3",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:*",
"match_criteria_id": "3508BE09-6B84-4819-BC0F-7E23964FE29D",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:*",
"match_criteria_id": "1A17FFE5-97F5-45D0-8C54-3C22BF1FFA72",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:*",
"match_criteria_id": "CE8C8052-8980-4265-929B-E27B6A914B4F",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:*",
"match_criteria_id": "2D6C0F89-47E6-4895-909D-6AF8DBFE2477",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*",
"match_criteria_id": "D419EFAE-E03F-4F4A-8C18-06BE61EBBF5D",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": "229.231",
"version_end_excluding": null,
"affected_versions_first": "6.5.6.3",
"affected_versions_last": "229.231"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.011",
"affected_versions_last": "229.011"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.021",
"affected_versions_last": "229.021"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.031",
"affected_versions_last": "229.031"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.041",
"affected_versions_last": "229.041"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.051",
"affected_versions_last": "229.051"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.061",
"affected_versions_last": "229.061"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.101",
"affected_versions_last": "229.101"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.111",
"affected_versions_last": "229.111"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:*",
"vendor": "ibm",
"product": "lotus_inotes",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "229.131",
"affected_versions_last": "229.131"
}
],
"cwe": null,
"epss_score": {
"epss": 0.01541,
"percentile": 0.73854,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
}
]
}