Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2026-3862

Cross-Site Scripting Vulnerability in SiteMinder Administrative UI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom SiteMinder

Default version status: unaffected

  • 12.9affected
  • 12.8.xaffected

References