What’s Vulnerable › Vulnerabilities

CVE-2002-0037

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-04-22 · updated 2026-06-16

Description

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

Affected products

• IBM Lotus Domino Server: 4.5, 4.6, 5

References

• http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html
• http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html
• http://www.iss.net/security_center/static/10095.php
• http://www.kb.cert.org/vuls/id/657899
• http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html
• http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html
• http://www.iss.net/security_center/static/10095.php
• http://www.kb.cert.org/vuls/id/657899

Get alerted when CVE-2002-0037 or the next vulnerability affects your stack