Every CVESearch/Get API key

CVE-2001-0846

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting...

10.0 High

CVE-2001-0846 is a high vulnerability (CVSS 10.0) in Lotus Domino, published December 6, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 41.2%, the 98th percentile. No source names a fixed version.

Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
41.2%EPSS, 98th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Exploit likelihood

41.2%Up 34.7 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used10.0

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Record
CVE-2001-0846
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Record
CVE-2001-0846
Updated
2026-11-02
EUVDEUVD-2001-0829No score

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Record
EUVD-2001-0829
Updated
2026-11-03
GitHub AdvisoriesGHSA-38r2-fj75-4896No score

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting...

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Record
GHSA-38r2-fj75-4896
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open