Approved changes feed: RSS · Atom

cpe:2.3:a:broadcom:siteminder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBroadcom (9814e701-1071-5d68-93ef-4536eaf59407)
ProductSiteminder (cd619ff2-2715-5abe-b245-0625498b4a0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3862 vulnerable 2026-06-08 08:01:19.578136 Cross-Site Scripting Vulnerability in SiteMinder Administrative UI
Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.
Published: 2026-03-10T14:52:52.344Z
Updated: 2026-03-10T15:40:24.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2705 vulnerable 2026-06-08 04:51:30.154466 Details available
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
Published: 2009-08-11T10:00:00.000Z
Updated: 2024-09-16T21:04:16.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.