PatchTheCVECVE-2015-10039: A vulnerability was found in dobos domino
CVE-2015-10039 is a medium-severity flaw (CVSS 5.5) affecting domino. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to version 0.1.5524.38553 is able to address this issue. The name of the patch is 16f039073709a21a76526110d773a6cce0ce753a. It is recommended to upgrade the affected component. The identifier of this vulnerabilit
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 46%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2023-01-11 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2015-10039?
domino: upgrade to 0.1.5524.38553. Exact commands for each OS are on this page.
Is CVE-2015-10039 being exploited?
CVE-2015-10039 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2015-10039 affect?
CVE-2015-10039 affects domino. Severity is medium (CVSS 5.5). A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to
How urgent is CVE-2015-10039?
Priority 33/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-23562 MEDIUM 5.3 DOWNGRADE A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information
- CVE-2023-37539 HIGH 8.4 DOWNGRADE The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2023-37495 MEDIUM 5.9 UPGRADE Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action o
- CVE-2023-28010 MEDIUM 4.0 DOWNGRADE In some configuration scenarios, the Domino server host name can be exposed
- CVE-2022-44754 CRITICAL 9.8 DOWNGRADE HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView