Broadcom Siteminder vulnerabilities

3 vulnerabilities

Known vulnerabilities in Broadcom Siteminder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2013-5968broadcomsiteminder+1
EPSS score
2.62%
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.4.3CVE-2011-1718broadcomsiteminder+1
EPSS score
2.44%
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.4.8CVE-2026-3862broadcomsiteminder+1
EPSS score
0.25%
Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.