Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-36459

Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom Symantec SiteMinder

Default version status: unaffected

  • R 12.52 SP1 CR11 and belowaffected
  • R12.8affected

References