Vulnerability record · CVE-2004-0480 · published 6 December 2004

CVE-2004-0480: Ibm lotus notes argument injection vulnerability

Ibm · Lotus Notes

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.

10.0 CVSS 2.0 High EPSS 8.6% · top 5.1% CWE-88 · Argument injection

10.0CVSS 2.0 base score

8.6%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Lotus Notes Ibm

References

Link	Tags
http://marc.info/?l=bugtraq&m=108843896506099&w=2	Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510	Broken LinkPatchVendor Advisory
http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities	Broken LinkExploitPatchVendor Advisory
http://www.securityfocus.com/bid/10600	Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16496	Third Party AdvisoryVDB Entry
http://marc.info/?l=bugtraq&m=108843896506099&w=2	Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510	Broken LinkPatchVendor Advisory
http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities	Broken LinkExploitPatchVendor Advisory
http://www.securityfocus.com/bid/10600	Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16496	Third Party AdvisoryVDB Entry

Track CVE-2004-0480 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-1608Ibm lotus notes memory buffer overflow vulnerabilityStack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unk…EPSS 5.8%29 Apr 2010 10.0CVE-2009-3032Ibm lotus notes vulnerabilityInteger overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security f…EPSS 3.7%5 Mar 2010 10.0CVE-2006-0119Ibm lotus domino vulnerabilityMultiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential secu…EPSS 3.8%9 Jan 2006 10.0CVE-2004-2281Ibm lotus notes vulnerabilityMultiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java…EPSS 2.2%31 Dec 2004 9.3CVE-2012-6349Autonomy keyview idol memory buffer overflow vulnerabilityBuffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrar…EPSS 3.2%18 Jul 2013 9.3CVE-2012-4821Ibm java vulnerabilityMultiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 …EPSS 6.9%11 Jan 2013 9.3CVE-2012-4822Ibm java vulnerabilityMultiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 …EPSS 6.9%11 Jan 2013 9.3CVE-2012-4823Ibm java vulnerabilityUnspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and ea…EPSS 6.9%11 Jan 2013

Source: NIST National Vulnerability Database (record CVE-2004-0480), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.