CVE-2018-6586

State: Published
Severity: Not scored
Published: Mar 29, 2018
Updated: Sep 16, 2024
Reserved: Feb 2, 2018

Description

CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
CA API Developer PortalCA Technologies	3.5 to before 3.5 CR7Affected

References

1040603vdb-entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180328-01--security-notice-for-ca-api-developer-portal.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.