CVE-2008-7253

no score yetEPSS 2.1%

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-16
Published: 2010-01-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_domino_server

References

http://www-01.ibm.com/support/docview.wss?&uid=swg21201202
http://www.kb.cert.org/vuls/id/867593
http://www.kb.cert.org/vuls/id/AAMN-5K42VN
http://www.kb.cert.org/vuls/id/AAMN-5K42VT
http://www-01.ibm.com/support/docview.wss?&uid=swg21201202

Check your stack JSON