CVE-2013-0536

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-21 · updated 2026-06-16
Weakness: CWE-264

Description

ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24.

Affected products

IBM Lotus Inotes: 8.5.2.0, 8.5.3.0
IBM Lotus Notes: 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1
IBM Lotus Notes Traveler: 9.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21633827
https://exchange.xforce.ibmcloud.com/vulnerabilities/82658
http://www-01.ibm.com/support/docview.wss?uid=swg21633827
https://exchange.xforce.ibmcloud.com/vulnerabilities/82658

Get alerted when CVE-2013-0536 or the next vulnerability affects your stack