Siteminder (Broadcom) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-03-10. Vendor: Broadcom.

CVEs of Siteminder

• CVE-2026-3862 - CVSS 4.8 (medium), 2026-03-10: Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.
• CVE-2013-5968 - CVSS 4.3 (medium), 2013-10-29: Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web…
• CVE-2011-1718 - CVSS 4.3 (medium), 2011-04-27: The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote…
• CVE-2009-2705 - CVSS 4.3 (medium), 2009-08-11: CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong…