CVE-2015-8699

6.1MEDIUM

Key Information:

Vendor
Broadcom
Status
Release Automation
Vendor
CVE Published:
29 June 2016

Summary

Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.securitytracker.com/id/1036193
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/91497
vdb-entryx_refsource_BID
http://www.ca.com/us/support/ca-support-online/product-co...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.