← Back

CVE-2018-6588

nvd nist
Published: Mar 29, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.

Affected (6)

Ca
1 product
Api Developer Portal
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ca
Api Developer Portal
Version 3.5
Api Developer Portal
Version 3.5 cr1
Api Developer Portal
Version 3.5 cr2
Api Developer Portal
Version 3.5 cr3
Api Developer Portal
Version 3.5 cr4
Api Developer Portal
Version 3.5 cr5

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

Source: vuln@ca.com
Third Party AdvisoryVDB Entry
Source: vuln@ca.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.