CVE-2018-6586 CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.
MediumCVSS 6.1
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca api developer portal | = 3.5 | No fix listed |
| ca api developer portal | = 3.5-cr1 | No fix listed |
| ca api developer portal | = 3.5-cr2 | No fix listed |
| ca api developer portal | = 3.5-cr3 | No fix listed |
| ca api developer portal | = 3.5-cr4 | No fix listed |
| ca api developer portal | = 3.5-cr5 | No fix listed |
| ca api developer portal | = 3.5-cr6 | No fix listed |
| ca technologies CA API Developer Portal | >= 3.5, < 3.5 CR7 | 3.5 CR7 |
References
- 1040603 third-party-advisory vdb-entry
- support.ca.com patch vendor-advisory