CVE-2024-36459

Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent

High · published June 14, 2024

CVSS v4.0
8.4
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L
EPSS
0.00420 · 35.3th percentile
Published
2024-06-14T12:06Z
EPSS history
Timeline
  • 14 JUN 12:06Z
    Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent
    cvelistv5