CVE-2012-3301

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and…

published August 21, 2012

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01467 · 73.4th percentile
Published
2012-08-21T10:00Z
EPSS history
Timeline
  • 21 AUG 10:00Z
    Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and…
    cvelistv5