CVE-2010-3894: IBM Omnifind

High severity, CVSS 9.3. EPSS: 12% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.

Affected products

• IBM Omnifind: up to and including 8.5; version 6.1 only; version 8.0 only; version 8.4 only

Published 2010-11-12. Last modified 2026-06-16.