High severity7.8NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026
CVE-2018-1437
CVE-2018-1437
Description
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Affected products
138.5.3.6+ 12 more
- (no CPE)range: 8.5.3.6
- (no CPE)range: 8.5, 9.0
- cpe:2.3:a:ibm:notes:8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/103401nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040563nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/139565nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.