PT-2015-5529 · Ibm · Ibm Domino

Eugene Dokukin + 1 · Published 2015-06-28 · Updated 2019-10-16 · CVE-2015-1981

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x before 8.5.3 FP6 IF8 IBM Domino versions 9.x before 9.0.1 FP4

Description A cross-site scripting (XSS) issue exists in the web server of IBM Domino when Webmail is enabled. This allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Recommendations For IBM Domino versions 8.5.x before 8.5.3 FP6 IF8, update to version 8.5.3 FP6 IF8 or later. For IBM Domino versions 9.x before 9.0.1 FP4, update to version 9.0.1 FP4 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-1981

Affected Products

Ibm Domino

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-1981 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21959908 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1981 · Note
• http://securitytracker.com/id/1032673 · Note
• http://securityfocus.com/bid/74908 · Note
• http://seclists.org/fulldisclosure/2015/Jun/56 · Note