Cross-Site Scripting Vulnerability in Broadcom Symantec SiteMinder WebAgent
CVE-2023-23956
5.4MEDIUM
What is CVE-2023-23956?
A security flaw exists in Broadcom's Symantec SiteMinder WebAgent 12.52 that allows an attacker to inject malicious HTML and JavaScript code. When executed, this code runs in the context of the user's browser, potentially compromising user data and session integrity. It highlights significant risks associated with inadequate input validation that can lead to unauthorized actions and data breaches.
Affected Version(s)
Symantec SiteMinder WebAgent 12.5.2
References
EPSS Score
6% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved