CVE-2013-5968

MEDIUM 4.3CVE-2013-5968 · Published 29/10/2013 · updated 16/06/2026

In short

CVE-2013-5968 is a MEDIUM (CVSS 4.3) vulnerability affecting siteminder (broadcom), web agents (ca).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
siteminder broadcom	`= 12.0= 12.5= 12.51`	No fix yet
web agents ca	`= 6.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.

References

archives.neohapsis.com/archives/bugtraq/2013-10/0120.html
osvdb.org/98919
seclists.org/fulldisclosure/2013/Oct/230
securitytracker.com/id/1029237
support.ca.com/irj/portal/anonymous/phpsupcontent

More vulnerabilities in siteminder

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free