Lucene search
HistoryJan 09, 2010 - 6:30 p.m.
CVE-2010-0275
ibm
lotus
inotes
ultra-light mode
cve-2010-0275
domino
web access
dwa
nvd
security
vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58.
Affected configurations
Node
ibmlotus_inotesRange≤229.231
ORibmlotus_inotesMatch229.011
ORibmlotus_inotesMatch229.021
ORibmlotus_inotesMatch229.031
ORibmlotus_inotesMatch229.041
ORibmlotus_inotesMatch229.051
ORibmlotus_inotesMatch229.061
ORibmlotus_inotesMatch229.101
ORibmlotus_inotesMatch229.111
ORibmlotus_inotesMatch229.131
ORibmlotus_inotesMatch229.141
ORibmlotus_inotesMatch229.151
ORibmlotus_inotesMatch229.161
ORibmlotus_inotesMatch229.171
ORibmlotus_inotesMatch229.181
ORibmlotus_inotesMatch229.191
ORibmlotus_inotesMatch229.201
ORibmlotus_inotesMatch229.211
ORibmlotus_inotesMatch229.221
ibmlotus_dominoMatch8.0.2.3
Related
prion
prion
Design/Logic Flaw
2010-01-09 18:30:00
nvd
nvd
CVE-2010-0275
2010-01-09 18:30:01
cvelist
cvelist
CVE-2010-0275
2010-01-09 18:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
Related for CVE-2010-0275