CVE-2016-0304

The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is…

published June 29, 2016

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02480 · 84.4th percentile
Published
2016-06-29T01:00Z
EPSS history
Timeline
  • 29 JUN 01:00Z
    The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is…
    cvelistv5