CVE-2002-1010
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root...
CVE-2002-1010 is a high vulnerability (CVSS 7.5) in Lotus Domino R4, published August 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.40%, the 72nd percentile. No source names a fixed version.
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
Exploit likelihood
What each source reports
NVD Score used
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
- Record
CVE-2002-1010- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
- Record
CVE-2002-1010- Updated
- 2026-11-02
EUVDEUVD-2002-0999 No score
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
- Record
EUVD-2002-0999- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-593p-v3rw-wc95 No score
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root...
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
- Record
GHSA-593p-v3rw-wc95- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |