CVE-2001-1018

VendorlotusProductdominoDiscoveredSep 20, 2001UpdatedApr 16, 2026

Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.

View graph Watch Export

CVSS v3.1

—

EPSS

2.30%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

1 relationships

domino

source

Timeline

disclosure → media coverage

Sep 20, 2001

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026