CVE-2009-4149 Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
MediumCVSS 4.3
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca service desk | = 12.1 | No fix listed |
References
- 37253 patch vdb-entry
- support.ca.com patch vendor-advisory