CVE-2018-1437

7.8 highEPSS 2.2%

High (7.8) in ibm notes. EPSS 2.2% chance of exploitation in the next 30 days.

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2018-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:notes

References

http://www.ibm.com/support/docview.wss?uid=swg22014201
http://www.securityfocus.com/bid/103401
http://www.securitytracker.com/id/1040563
https://exchange.xforce.ibmcloud.com/vulnerabilities/139565
http://www.ibm.com/support/docview.wss?uid=swg22014201

Check your stack JSON