Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2004-0425

Disclosure Date: August 18, 2004 (last updated February 22, 2025)
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
0
0
Attacker Value
Unknown

CVE-2004-0672

Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.
0
0
Attacker Value
Unknown

CVE-2001-1455

Disclosure Date: August 24, 2001 (last updated February 22, 2025)
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.
0
0
Attacker Value
Unknown

CVE-2000-0850

Disclosure Date: November 14, 2000 (last updated February 22, 2025)
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.
0
0