CVE-2008-4119

Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
broadcomservice_desk
11.2
cacmdb
11.0
cacmdb
11.1
cacmdb
11.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspx
http://secunia.com/advisories/32038
http://securityreason.com/securityalert/4318
http://www.securityfocus.com/archive/1/496755/100/0/threaded
http://www.securityfocus.com/bid/31412
http://www.securitytracker.com/id?1020949
http://www.vupen.com/english/advisories/2008/2673
https://exchange.xforce.ibmcloud.com/vulnerabilities/45416
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=186585
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspx
http://secunia.com/advisories/32038
http://securityreason.com/securityalert/4318
http://www.securityfocus.com/archive/1/496755/100/0/threaded
http://www.securityfocus.com/bid/31412
http://www.securitytracker.com/id?1020949
http://www.vupen.com/english/advisories/2008/2673
https://exchange.xforce.ibmcloud.com/vulnerabilities/45416
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=186585