CVE-2015-6853: The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J...

Security readout for executives and security teams

This flaw affects the Domino web agent for CA Single Sign-On, formerly SiteMinder. A crafted request from a remote attacker could crash the agent daemon or expose sensitive information. The sources do not provide CVSS data, exploit maturity, or detailed impact scope. Exposure is most likely where legacy CA Single Sign-On Domino web agents are internet-facing or reachable by untrusted users. Affected versions include R6 and listed R12 builds before the maintenance levels named in the CVE description. Prioritize remediation if CA Single Sign-On protects business-critical Domino applications or is reachable from the internet. The business concern is authentication-layer disruption and possible information exposure, but source evidence is incomplete on severity and exploitation. Mitigation focus: Identify any CA Single Sign-On Domino web agent deployments.; Compare installed versions against affected R6 and R12 release lines.; Apply vendor guidance from CA security notice CA20160323-01..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.