cbcvebase.
CVE-2016-0304
published 2016-06-29

CVE-2016-0304: The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is…

PriorityP349high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
2.46%
82.6th percentile
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920.

Affected

25 ranges
VendorProductVersion rangeFixed in
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——
ibmdomino——

CVSS provenance

nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.