CVE-2016-6087

CRITICAL 9.8CVE-2016-6087 · Published 07/06/2017 · updated 17/06/2026

In short

CVE-2016-6087 is a CRITICAL (CVSS 9.8) vulnerability affecting domino (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
domino ibm	`= 8.5.1.0= 8.5.1.1= 8.5.1.2= 8.5.1.3= 8.5.1.4= 8.5.1.5= 8.5.2.0= 8.5.2.1= 8.5.2.2= 8.5.2.3= 8.5.2.4= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 8.5.3.6= 9.0.0.0= 9.0.1.0= 9.0.1.1= 9.0.1.2= 9.0.1.3= 9.0.1.4= 9.0.1.5= 9.0.1.6= 9.0.1.7`	No fix yet

Description

IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918.

References

ibm.com/support/docview.wss · Patch
securityfocus.com/bid/98794 · Third Party Advisory
securitytracker.com/id/1038606 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/117918 · VDB Entry

More vulnerabilities in domino

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

domino

ibm

= 8.5.1.0= 8.5.1.1= 8.5.1.2= 8.5.1.3= 8.5.1.4= 8.5.1.5= 8.5.2.0= 8.5.2.1= 8.5.2.2= 8.5.2.3= 8.5.2.4= 8.5.3.0= 8.5.3.1= 8.5.3.2= 8.5.3.3= 8.5.3.4= 8.5.3.5= 8.5.3.6= 9.0.0.0= 9.0.1.0= 9.0.1.1= 9.0.1.2= 9.0.1.3= 9.0.1.4= 9.0.1.5= 9.0.1.6= 9.0.1.7

No fix yet

More vulnerabilities in domino

See all →