Unscored severity · published Dec 10, 2005
CVE-2005-4150
Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors
–
CVSS
2.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cleverpath Portal · Broadcom
4.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4150
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4150
Patch
http://secunia.com/advisories/17962
supportconnect.ca.com
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QI70871
www.osvdb.org
http://www.osvdb.org/21575
Patch
http://www.securityfocus.com/bid/15783
www.vupen.com
http://www.vupen.com/english/advisories/2005/2822
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23536
More from Cleverpath Portal
–
CVE-2007-2230
SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the…
–
CVE-2006-6641
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion…