CVE-2015-6854

CRITICAL · CVSS 9.1 EPSS 1.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-03-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-6854

Severity

CRITICAL

CVSS

9.1

EPSS

1.50%

Original Filing — NVD Description

The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.