Login Request a demo
SI
Product
SiteMinder
by Broadcom · last CVE Mar 10, 2026
4
CVEs
0
On KEV
4.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 0
Severity
All severities4Critical0High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SiteMinder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3862
4.8
0%
Mar 10
Cross-Site Scripting Vulnerability in SiteMinder Administrative UI
Affected: 12.9; 12.8.x
CVE-2013-5968
–
3%
Oct 29
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via…
Affected: 12.0; 12.0; 12.0; 12.5; 12.51
CVE-2011-1718
–
2%
Apr 27
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct…
Affected: 12.0
CVE-2009-2705
–
4%
Aug 11
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of…
Affected: All versions, or not specified
Showing 4