Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH9WYPR5.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2015/Jun/56 | Mailing List Third Party Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg21959908 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/74908 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1032673 | Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2015/Jun/56 | Mailing List Third Party Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg21959908 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/74908 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1032673 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2015/Jun/56 - Mailing List, Third Party Advisory | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21959908 - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/74908 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1032673 - Third Party Advisory, VDB Entry |
Information
Published : 2015-06-28 14:59
Updated : 2024-11-21 02:26
NVD link : CVE-2015-1981
Mitre link : CVE-2015-1981
CVE.ORG link : CVE-2015-1981
JSON object : View
Products Affected
ibm
- domino
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')