CVE-2008-4119 Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom service desk | = 11.2 | No fix listed |
| ca cmdb | = 11.0 | No fix listed |
| ca cmdb | = 11.1 | No fix listed |
| ca cmdb | = 11.2 | No fix listed |
References
- community.ca.com
- 32038 third-party-advisory vendor-advisory
- 4318 third-party-advisory
- 20080926 CA Service Desk Multiple Cross-Site Scripting Vulnerabilities mailing-list
- 31412 vdb-entry
- 1020949 vdb-entry
- ADV-2008-2673 vdb-entry
- ca-servicedesk-webforms-xss(45416) vdb-entry
- support.ca.com