Symantec Siteminder
Monthly
Reflected or stored cross-site scripting (XSS) in Broadcom Symantec SiteMinder allows a high-privileged attacker to inject malicious script content into application pages that is returned unaltered to victims who actively interact with the affected resource. The vulnerability requires PR:H and UI:A per the CVSS 4.0 vector, limiting real-world impact to scenarios where a privileged user can submit crafted data and a second user is socially engineered or passively exposed to the poisoned page. With an EPSS score of 0.04% (13th percentile) and no confirmed active exploitation or public proof-of-concept, this vulnerability represents a low-urgency but valid hardening target in enterprise SiteMinder deployments.
Reflected or stored cross-site scripting (XSS) in Broadcom Symantec SiteMinder allows a high-privileged attacker to inject malicious script content into application pages that is returned unaltered to victims who actively interact with the affected resource. The vulnerability requires PR:H and UI:A per the CVSS 4.0 vector, limiting real-world impact to scenarios where a privileged user can submit crafted data and a second user is socially engineered or passively exposed to the poisoned page. With an EPSS score of 0.04% (13th percentile) and no confirmed active exploitation or public proof-of-concept, this vulnerability represents a low-urgency but valid hardening target in enterprise SiteMinder deployments.