CVE-2017-9394

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user.

Score

CVSS 3.0 5.4 Medium

Status

Modified - vuln@ca.com

Published

2017-11-14

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Identity Governance (Ca)
• Ca Identity Governance (Ca Technologies)

References

• http://www.securityfocus.com/bid/101849
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20171114-01--security-notice-for-ca-id…