medium5.4Public exploit code
CVE-2023-23956
A user can supply malicious HTML and JavaScript code that will be executed in the client browser
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)2023-06-19 · webapps · hardware
Impact
A user can supply malicious HTML and JavaScript code that will be executed in the client browser
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Symantec Siteminder Webagent | Version 12.52 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html
- https://support.broadcom.com/external/content/SecurityAdvisories/0/22221
- http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html
- https://support.broadcom.com/external/content/SecurityAdvisories/0/22221
- https://packetstorm.news/files/id/173038