CVE-2015-8699 Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 befor...
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom release automation | >= 5.0.2, < 5.0.2-227 | 5.0.2-227 |
| broadcom release automation | >= 5.5.1, < 5.5.1-1616 | 5.5.1-1616 |
| broadcom release automation | >= 5.5.2, < 5.5.2-434 | 5.5.2-434 |
| broadcom release automation | >= 6.1.0, < 6.1.0-1026 | 6.1.0-1026 |
References
- www.ca.com vendor-advisory
- 91497 third-party-advisory vdb-entry
- 1036193 third-party-advisory vdb-entry