Vulnerability Database

308,820

Total vulnerabilities in the database

CVE-2013-5968

Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.

  • Published: Oct 29, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-5968
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ca / web_agents 6.0 6.0.x
broadcom / siteminder 12.0-sp2 12.0-sp2.x
broadcom / siteminder 12.5 12.5.x
broadcom / siteminder 12.51 12.51.x
broadcom / siteminder 12.0-sp1 12.0-sp1.x
broadcom / siteminder 12.0-sp3 12.0-sp3.x