8.4 High

CVE-2024-36459 A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent…

Description

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser.

Affected products and versions

Product	Affected versions	Fixed in
Symantec SiteMinder	Versions not published
symantec_siteminder	Versions not published

Do you use Symantec SiteMinder?

Track this CVE Watch Symantec SiteMinder Check my SBOMs

cveye.io/en/cve/CVE-2024-36459

Timeline

Published June 14, 2024
Last modified August 2, 2024

References

support.broadcom.com support.broadcom.com
datatracker.ietf.org datatracker.ietf.org

Track this CVE