Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Broadcom Ca
Products
Siteminder Siteminder
CVE-2011-4054

Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Ca
Products
Siteminder
CVE-2013-5968

Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Broadcom Ca
Products
Siteminder Web Agents