How severe is CVE-2010-0276?

CVE-2010-0276 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2010-0276 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-0276?

CVE-2010-0276 primarily affects Ibm Domino Web Access. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-0276?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2010-0276 published?

CVE-2010-0276 was published on 2010-01-09 and last updated on 2026-06-16.

CVE-2010-0276

CVE-2010-0276 is a critical-severity vulnerability in Ibm Domino Web Access with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ibm Domino Web Access
Published: 2010-01-09
Last modified: 2026-06-16

Description

IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.

Frequently asked questions

What is CVE-2010-0276?: IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.
How severe is CVE-2010-0276?: CVE-2010-0276 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2010-0276 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2010-0276?: CVE-2010-0276 primarily affects Ibm Domino Web Access. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2010-0276?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2010-0276 published?: CVE-2010-0276 was published on 2010-01-09 and last updated on 2026-06-16.

References

Affected products (3)

cpe:2.3:a:ibm:domino_web_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*

More vulnerabilities in Ibm Domino Web Access

CVE-2007-4474 — Critical (CVSS 9.3): Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll,…
CVE-2010-0919 — High (CVSS 7.6): Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access…
CVE-2009-3105 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino…

All CVEs affecting Ibm Domino Web Access →