Description
A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec SiteMinder | R 12.52 SP1 CR11 and below, R12.8 | — |