Vulnerability in IBM Domino Web Access
CVE-2010-0276
IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.015 (74.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 74.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000
Affected products
- IBM Domino Web Access
- IBM Lotus Domino — versions 8.0.2.3
- IBM Lotus Inotes
References
- secunia.com/advisories/38026 (Vendor Advisory, third-party-advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/55473 (vdb-entry)
- www.vupen.com/english/advisories/2010/0077 (vdb-entry, Vendor Advisory)
- www.securityfocus.com/bid/37675 (vdb-entry)
- www-01.ibm.com/support/docview.wss