CVE-2006-0119 json
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "pote…
published 2006-01-09 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0127
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted vCal meeting request sent via SMTP (aka SPR# KSPR699NBP).
Patch / fix
- securityfocus.com/bid/16158 patch
- secunia.com/advisories/18328 advisory
Exploit prediction
3.84% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
securityfocus.com
/bid/16158
vdb-entry, patch
-
secunia.com
/advisories/18328
third-party-advisory, patch, vendor-advisory
-
vupen.com
/english/advisories/2006/2564
vdb-entry, vendor-advisory
-
secunia.com
/advisories/20855
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2006/0081
vdb-entry, vendor-advisory
- www-1.ibm.com /support/docview.wss?uid=swg27007054
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/d1150fc9c5dec8b18525709200001da6?OpenDocument&Highlight=0%
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27413
vdb-entry
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/f97fe7cfd9a8113b8525709200001db4?OpenDocument&Highlight=0%
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/94a77eb898843aca8525709200001de1?OpenDocument&Highlight=0%
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24207
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24211
vdb-entry
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/e4deb1cbb011c747852570e4001ba9bb?OpenDocument&Highlight=0%
-
securitytracker.com
/id?1016390
vdb-entry
-
securityfocus.com
/bid/18020
vdb-entry
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9a1650d1a771f3078525702a00420def?OpenDocument&Highlight=0%
-
securityfocus.com
/archive/1/438461/100/0/threaded
mailing-list
Sources
- CVE List CVE-2006-0119
- NVD CVE-2006-0119
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.