CVE-2016-9148 Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REF_NUM param...
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REF_NUM parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca service desk manager | = 12.9 | No fix listed |
| ca service desk manager | = 14.1 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20161110 CA11/09/2016-02: Security Notice for CA Service Desk Manager mailing-list third-party-advisory vdb-entry
- www.ca.com vendor-advisory
- 94258 third-party-advisory vdb-entry
- 1037262 third-party-advisory vdb-entry