CVE-2015-8699: XSS

Q: What is the severity of CVE-2015-8699?

CVE-2015-8699 has been rated as a critical vulnerability due to its potential for remote code execution via cross-site scripting.

Q: How do I fix CVE-2015-8699?

To fix CVE-2015-8699, you should upgrade CA Release Automation to the latest version that addresses these vulnerabilities.

Q: What software is affected by CVE-2015-8699?

CVE-2015-8699 affects multiple versions of CA Release Automation prior to 5.0.2-227, 5.5.1-1616, 5.5.2-434, and 6.1.0-1026.

Q: Is there a workaround for CVE-2015-8699?

Currently, there are no known workarounds for CVE-2015-8699 and upgrading is the recommended action.

Q: Can CVE-2015-8699 be exploited remotely?

Yes, CVE-2015-8699 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.

Published Jun 29, 2016

Updated

Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

4 affected components

Broadcom Release Automation>=5.0.2<5.0.2-227

Broadcom Release Automation>=5.5.1<5.5.1-1616

Broadcom Release Automation>=5.5.2<5.5.2-434

Broadcom Release Automation>=6.1.0<6.1.0-1026

Event History

Jun 29, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8699?

CVE-2015-8699 has been rated as a critical vulnerability due to its potential for remote code execution via cross-site scripting.

How do I fix CVE-2015-8699?

To fix CVE-2015-8699, you should upgrade CA Release Automation to the latest version that addresses these vulnerabilities.

What software is affected by CVE-2015-8699?