Description
Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | SiteMinder | 12.9, 12.8.x | — |
Medium · 4.6
CVE-2026-3862
EUVD-2026-10508GHSA-5p5r-v3f4-wcfv
Cross-Site Scripting Vulnerability in SiteMinder Administrative UI
Published Mar 10, 2026 · Updated Mar 10, 2026 · Assigned by symantec