Netegrity vulnerabilities
5 vulnerabilities
Known vulnerabilities in Netegrity products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Siteminder3 vulnerabilities
- Identityminder1 vulnerabilities
- Policy Server1 vulnerabilities
- Sideminder Affiliate Agent1 vulnerabilities
CVE-2001-1455netegritysiteminder
EPSS score2.06%
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.CVE-2005-10001broadcomsymantec_siteminder+1EPSS score0.72%
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainerCVE-2000-0850netegritysiteminderEPSS score1.69%
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.CVE-2004-0672netegrityidentityminder+1EPSS score2.01%
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.CVE-2004-0425netegritysideminder_affiliate_agentEPSS score4.99%
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.