CVE-2012-3301 — Improper Input Validation in IBM Lotus Domino

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 50.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedAug 21
Latest updateMay 17

Description

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/lotus_domino15 versions+14

🔴Vulnerability Details

2
GHSA
GHSA-xwfc-35wf-724m: Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8↗2022-05-17
▶
CVEList
CVE-2012-3301: Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8↗2012-08-21
▶
CVE-2012-3301 — Improper Input Validation in IBM | cvebase