Unscored CVE-2015-1981 EUVD-2015-2086GHSA-27xx-9jff-78j2

Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail …

Published Jun 28, 2015 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH9WYPR5.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21959908
74908 vdb-entry
20150619 IBM Domino Web Server Cross-site Scripting Vulnerability (CVE-2015-1981) mailing-list
1032673 vdb-entry