Cross-Site Scripting Vulnerability in Computer Associates CleverPath 4.7 Portal Login Page
CVE-2005-4150

Currently unrated

Key Information:

Vendor: Broadcom
Status: Cleverpath Portal
Vendor: CVE Published:; 10 December 2005

What is CVE-2005-4150?

A cross-site scripting (XSS) vulnerability exists in the portal login page of Computer Associates CleverPath 4.7. This flaw allows remote attackers to inject and execute malicious JavaScript code through unspecified methods, potentially compromising user credentials and sensitive data. As a result, unauthorized entities may exploit this vulnerability to conduct phishing attacks or unauthorized account access.

References

http://www.securityfocus.com/bid/15783

vdb-entryx_refsource_BID

http://secunia.com/advisories/17962

third-party-advisoryx_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/23536

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 10, 2005
Vulnerability Reserved
Dec 10, 2005

CVE-2005-4150 Data

JSON

Broadcom

What is CVE-2005-4150?

References

Timeline