Unscored severity · published Jan 9, 2010
CVE-2010-0276
IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that…
–
CVSS
1.5%
EPSS
No
On KEV
Description
IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DW
Domino Web Access · Ibm
All versions, or not specified · source: NVD
LD
Lotus Domino · Ibm
8.0.2.3 · source: NVD
LI
Lotus Inotes · Ibm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0276
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0276
Vendor Advisory
http://secunia.com/advisories/38026
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg27017776
www.securityfocus.com
http://www.securityfocus.com/bid/37675
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0077
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/55473
More from Domino Web Access
–
CVE-2010-0919
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281…
–
CVE-2009-3105
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script…
–
CVE-2007-4474
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x…