IBM Domino Web Server Cross-site Scripting Vulnerability (CVE-2015-1981)

Hello 3APA3A! Earlier I wrote about XSS vulnerability in IBM Domino http://seclists.org/fulldisclosure/2015/May/128. I informed IBM in May about it and at 17.06.2015 they fixed it and released security bulletin. Security Bulletin: IBM Domino Web Server Cross-site Scripting Vulnerability...

CVE-2015-1981

CVE-2015-1981 affects IBM Domino Web Server. A cross-site scripting vulnerability exists in the webmail interface when Webmail is enabled, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL in IBM Domino 8.5.x (before 8.5.3 FP6 IF8) and 9.x (before 9.0.1 ...