Netegrity Siteminder vulnerabilities

3 vulnerabilities

Known vulnerabilities in Netegrity Siteminder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2001-1455netegritysiteminder
EPSS score
2.06%
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.6.1CVE-2005-10001broadcomsymantec_siteminder+1
EPSS score
0.72%
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer7.5CVE-2000-0850netegritysiteminder
EPSS score
1.69%
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.