Read the docs
TI-2012-05122 Aliases CVE-2012-6277GHSA-82v3-6vww-pw2h

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in…

Priority MEDIUM 45Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."

Why it matters now

EPSS 0.08119 94th percentileScored 2026-11-07
Fix Fixed Autonomy KeyView IDOL: 10.16

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Autonomy KeyView IDOLbefore 10.1610.16Patch availableCNA
  • Autonomy KeyView IDOL Vendor— Affected before 10.16 Fixed in 10.16 Patch available CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:a:ibm:domino:*:*:*:*:*:*:*:*8.5.0 – 8.5.3.6VulnerableIBM
cpe:2.3:a:ibm:notes:*:*:*:*:*:*:*:*8.5 – 8.5.3VulnerableIBM
cpe:2.3:a:symantec:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*11.0 to before 11.6.1VulnerableSymantec
cpe:2.3:a:symantec:data_loss_prevention_enforce\/detection_servers:*:*:*:*:*:linux:*:*11.0 to before 11.6.1VulnerableSymantec
cpe:2.3:a:symantec:data_loss_prevention_enforce\/detection_servers:*:*:*:*:*:windows:*:*11.0 to before 11.6.1VulnerableSymantec
cpe:2.3:a:symantec:mail_security:*:*:*:*:*:microsoft_exchange:*:*up to 6.5.7VulnerableSymantec
cpe:2.3:a:symantec:mail_security:*:*:*:*:*:domino:*:*up to 8.1.0VulnerableSymantec
cpe:2.3:a:symantec:mail_security:6.5.7:*:*:*:*:*:*:*6.5.7VulnerableSymantec
cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*9.5 to before 10.0.1VulnerableSymantec
cpe:2.3:a:hp:autonomy_keyview_idol:*:*:*:*:*:*:*:*before 10.16VulnerableHewlett Packard Enterprise
  • cpe:2.3:a:ibm:domino:*:*:*:*:*:*:*:* Versions 8.5.0 – 8.5.3.6 Vulnerable ·IBM
  • cpe:2.3:a:ibm:notes:*:*:*:*:*:*:*:* Versions 8.5 – 8.5.3 Vulnerable ·IBM
  • cpe:2.3:a:symantec:data_loss_prevention_endpoint:*:*:*:*:*:*:*:* Versions 11.0 to before 11.6.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:data_loss_prevention_enforce\/detection_servers:*:*:*:*:*:linux:*:* Versions 11.0 to before 11.6.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:data_loss_prevention_enforce\/detection_servers:*:*:*:*:*:windows:*:* Versions 11.0 to before 11.6.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:*:*:*:*:*:microsoft_exchange:*:* Versions up to 6.5.7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:*:*:*:*:*:domino:*:* Versions up to 8.1.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:6.5.7:*:*:*:*:*:*:* Versions 6.5.7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:* Versions 9.5 to before 10.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:hp:autonomy_keyview_idol:*:*:*:*:*:*:*:* Versions before 10.16 Vulnerable ·Hewlett Packard Enterprise

Remediation

  • Fix · CNA Autonomy KeyView IDOL Fixed in 10.16

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6277
  2. 2026-10-03 Alias added: GHSA-82v3-6vww-pw2h

References

Advisory 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences