Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-6587 Details

CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180328-01--security-notice-for-ca-api-developer-portal.html	CVE	PatchVendor Advisory
http://www.securitytracker.com/id/1040603	CVE	Third Party AdvisoryVDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180328-01--security-notice-for-ca-api-developer-portal.html	[email protected]	PatchVendor Advisory
http://www.securitytracker.com/id/1040603	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]

Product	Versions
ca api developer portal	3.5 3.5 cr1 3.5 cr2 3.5 cr3 3.5 cr4
CPE cpe:2.3:a:ca:api_developer_portal:3.5:::::::* cpe:2.3:a:ca:api_developer_portal:3.5:cr1:::::: cpe:2.3:a:ca:api_developer_portal:3.5:cr2:::::: cpe:2.3:a:ca:api_developer_portal:3.5:cr3:::::: cpe:2.3:a:ca:api_developer_portal:3.5:cr4:::::: cpe:2.3:a:ca:api_developer_portal:3.5:cr5:::::: cpe:2.3:a:ca:api_developer_portal:3.5:cr6:::::: Remediation No remediation found in references.

Product

Versions

ca api developer portal

3.5

3.5 cr1

3.5 cr2

3.5 cr3

3.5 cr4

7 change records found show changes

QUICK INFO