CVE-2015-2014

Published: Aug 23, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via a crafted URL, aka SPR SJAR9DNGDA.

Affected (5)

Products: Ibm: Domino

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Domino	Version 8.5.0
Ibm Domino	Version 8.5.1
Ibm Domino	Version 8.5.2
Ibm Domino	Version 8.5.3
Ibm Domino	Version 9.0.1

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21963016

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securitytracker.com/id/1033271

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21963016

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securitytracker.com/id/1033271

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.