CVE-2017-1130

CVE-2017-1130 describes a denial-of-service vulnerability affecting IBM Notes versions 8.5 and 9.0. An attacker can exploit this by tricking a user into clicking a malicious link, which then repeatedly opens file selection dialog boxes, causing the client to hang and require a restart. This vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high availability impact. Its EPSS score suggests a higher-than-average likelihood of exploitation compared to other CVEs. While not listed on the KEV catalog or Hot List, exploit code is publicly available, including a Metasploit module and an ExploitDB entry. Despite this, there is no recorded community discussion or media coverage, suggesting it has not garnered significant public attention.