Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-3862

Cross-Site Scripting Vulnerability in SiteMinder Administrative UI

Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom
Products
Siteminder Symantec Siteminder
CVE-2009-2705

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Broadcom Sun
Products
Siteminder J2ee
CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Broadcom Ca
Products
Siteminder Siteminder
CVE-2013-5968

Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Broadcom Ca
Products
Siteminder Web Agents