Description
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter.
References (2)
Core 2
Core References
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/713012
Third Party Advisory, US Government Resource x_refsource_misc
http://www.kb.cert.org/vuls/id/MAPG-8MCH2B
Scores
EPSS
0.0112
EPSS Percentile
62.2%
Details
CWE
CWE-79
Status
published
Products (2)
ca/siteminder
< 12
ca/siteminder
< 6
Published
Dec 08, 2011
Tracked Since
Feb 18, 2026