Unscored severity · published Dec 8, 2011
CVE-2011-4054
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Siteminder · CA
through 6; through 12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4054
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4054
US Government Resource
http://www.kb.cert.org/vuls/id/713012
www.kb.cert.org
http://www.kb.cert.org/vuls/id/MAPG-8MCH2B
More from Siteminder
–
CVE-2011-1718
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct…