How severe is CVE-2006-4763?

CVE-2006-4763 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2006-4763 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (76th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-4763?

CVE-2006-4763 affects Ibm Lotus Domino Web Access. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-4763?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2006-4763 published?

CVE-2006-4763 was published on 2006-09-13 and last updated on 2026-06-16.

CVE-2006-4763

CVE-2006-4763 is a high-severity vulnerability in Ibm Lotus Domino Web Access with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 2% (76th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ibm Lotus Domino Web Access
Published: 2006-09-13
Last modified: 2026-06-16

Description

IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.

Frequently asked questions

What is CVE-2006-4763?: IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
How severe is CVE-2006-4763?: CVE-2006-4763 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2006-4763 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (76th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-4763?: CVE-2006-4763 affects Ibm Lotus Domino Web Access. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-4763?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2006-4763 published?: CVE-2006-4763 was published on 2006-09-13 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*

More vulnerabilities in Ibm Lotus Domino Web Access

CVE-2007-4474 — Critical (CVSS 9.3): Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll,…

All CVEs affecting Ibm Lotus Domino Web Access →