CVE-2005-1405: IBM Lotus Notes

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.

Affected products

• IBM Lotus Notes: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.5 only; …

Published 2005-05-03. Last modified 2026-06-16.