Cross-Site Scripting Vulnerability in Broadcom Symantec SiteMinder WebAgent

CVE-2023-23956

Summary

A security flaw exists in Broadcom's Symantec SiteMinder WebAgent 12.52 that allows an attacker to inject malicious HTML and JavaScript code. When executed, this code runs in the context of the user's browser, potentially compromising user data and session integrity. It highlights significant risks associated with inadequate input validation that can lead to unauthorized actions and data breaches.

References