Broadcom Cleverpath Portal vulnerabilities

2 vulnerabilities

Known vulnerabilities in Broadcom Cleverpath Portal, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2005-4150broadcomcleverpath_portal
EPSS score
2.41%
Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.7.5CVE-2006-6641arcservebrightstor+10
EPSS score
2.59%
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.