CVE-2011-1825 Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web....
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca arcot webfort versatile authentication server | <= 6.2.4 | No fix listed |
References
- 72124 vdb-entry
- 44317 third-party-advisory vendor-advisory
- 20110426 CA20110426-01: Security Notice for CA Arcot WebFort Versatile Authentication Server mailing-list
- 47587 vdb-entry
- 1025444 vdb-entry
- ADV-2011-1114 vdb-entry
- ca-arcotwebfort-admin-console-xss(67104) vdb-entry
- support.ca.com