CVE-2013-5968: XSS
Published Oct 29, 2013
·Updated
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.
Affected Software
6 affected components
CA Web Agents=6.0
Broadcom Siteminder=12.0-sp1
Broadcom Siteminder=12.0-sp2
Broadcom Siteminder=12.0-sp3
Broadcom Siteminder=12.5
Broadcom Siteminder=12.51
Event History
Oct 29, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5968?
The severity of CVE-2013-5968 is classified as medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-5968?
To fix CVE-2013-5968, update CA SiteMinder to the latest versions as recommended by Broadcom.
3
Which versions are affected by CVE-2013-5968?
CVE-2013-5968 affects CA SiteMinder versions 12.0 through 12.51 and Web Agents version 6.0.
4
What type of attack is associated with CVE-2013-5968?
CVE-2013-5968 is associated with cross-site scripting (XSS) attacks that can allow remote code execution.
5
Who can exploit CVE-2013-5968?
Remote attackers can exploit CVE-2013-5968 to inject arbitrary web scripts or HTML into affected applications.