Lucene search
HistoryJan 09, 2010 - 6:30 p.m.
CVE-2010-0275
ibm
lotus
inotes
ultra-light mode
cve-2010-0275
domino
web access
dwa
nvd
security
vulnerability
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
69.6%
Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58.
Affected configurations
Node
ibmlotus_inotesRange≤229.231
ORibmlotus_inotesMatch229.011
ORibmlotus_inotesMatch229.021
ORibmlotus_inotesMatch229.031
ORibmlotus_inotesMatch229.041
ORibmlotus_inotesMatch229.051
ORibmlotus_inotesMatch229.061
ORibmlotus_inotesMatch229.101
ORibmlotus_inotesMatch229.111
ORibmlotus_inotesMatch229.131
ORibmlotus_inotesMatch229.141
ORibmlotus_inotesMatch229.151
ORibmlotus_inotesMatch229.161
ORibmlotus_inotesMatch229.171
ORibmlotus_inotesMatch229.181
ORibmlotus_inotesMatch229.191
ORibmlotus_inotesMatch229.201
ORibmlotus_inotesMatch229.211
ORibmlotus_inotesMatch229.221
ibmlotus_dominoMatch8.0.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_inotes | 229.111 | cpe:/a:ibm:lotus_inotes:229.111::: |
| ibm | lotus_inotes | 229.221 | cpe:/a:ibm:lotus_inotes:229.221::: |
| ibm | lotus_inotes | 229.041 | cpe:/a:ibm:lotus_inotes:229.041::: |
| ibm | lotus_inotes | 229.191 | cpe:/a:ibm:lotus_inotes:229.191::: |
| ibm | lotus_inotes | 229.141 | cpe:/a:ibm:lotus_inotes:229.141::: |
| ibm | lotus_inotes | 229.211 | cpe:/a:ibm:lotus_inotes:229.211::: |
| ibm | lotus_inotes | 229.201 | cpe:/a:ibm:lotus_inotes:229.201::: |
| ibm | lotus_inotes | 229.031 | cpe:/a:ibm:lotus_inotes:229.031::: |
| ibm | lotus_inotes | 229.181 | cpe:/a:ibm:lotus_inotes:229.181::: |
| ibm | lotus_inotes | 229.061 | cpe:/a:ibm:lotus_inotes:229.061::: |
Related
nvd
nvd
CVE-2010-0275
2010-01-09 18:30:01
prion
prion
Design/Logic Flaw
2010-01-09 18:30:00
cvelist
cvelist
CVE-2010-0275
2010-01-09 18:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
69.6%
Related for CVE-2010-0275