← Back

Symantec Siteminder

symantec_siteminder

Vendor: Broadcom • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-3862
1Broadcom
1Symantec Siteminder
Jun 17, 2026
Mar 10, 2026
4.6 MEDIUM· v4
4.8 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.
CVE-2005-10001
1Broadcom
1Symantec Siteminder
Nov 20, 2024
Mar 28, 2022
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argu...Show more
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less