CVE-2017-1130

medium

Published 2017-09-05 · Modified 2026-05-13

CVSS v3

6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2

4.3

VIR risk

6.5

Description

IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — https://exchange.xforce.ibmcloud.com/vulnerabilities/121371

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg21999384

Application impact

Vendor	Product	Versions
ibm	inotes	`8.5.0.0`
ibm	inotes	`8.5.1.0`
ibm	inotes	`8.5.1.1`
ibm	inotes	`8.5.1.5`
ibm	inotes	`8.5.2.0`
ibm	inotes	`8.5.2.1`
ibm	inotes	`8.5.2.4`
ibm	inotes	`8.5.3.0`
ibm	inotes	`8.5.3.1`
ibm	inotes	`8.5.3.6`
ibm	inotes	`9.0.0.0`
ibm	inotes	`9.0.1.0`
ibm	inotes	`9.0.1.1`
ibm	inotes	`9.0.1.8`

References

Verify integrity in audit chain (admin only). AS-IS.