VulnerabilityModified

CVE-2011-2884

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."

HIGH 10.0EPSS 2.34%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 2.34% probability · 83th percentile
CISA KEV: Not listed
Affected: ibm/lotus symphony
Source: cve@mitre.org

References

http://secunia.com/advisories/45271Vendor Advisory
http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements
http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
http://www.ibm.com/support/docview.wss?uid=swg21505448
http://www.osvdb.org/73988
http://www.securityfocus.com/bid/48936
https://exchange.xforce.ibmcloud.com/vulnerabilities/68892
https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm
http://secunia.com/advisories/45271Vendor Advisory
http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements
http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
http://www.ibm.com/support/docview.wss?uid=swg21505448
http://www.osvdb.org/73988
http://www.securityfocus.com/bid/48936
https://exchange.xforce.ibmcloud.com/vulnerabilities/68892
https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.