8.4
High
CVE-2024-36459 A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent…
Description
A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Symantec SiteMinder | Versions not published | |
| symantec_siteminder | Versions not published |
References
- support.broadcom.com support.broadcom.com
- datatracker.ietf.org datatracker.ietf.org
Timeline
- Published
- Last modified