Vulnerabilities

TI-2005-04624 CVE-2005-10001 · GHSA-5wv4-gxj7-wpqw

Netegrity SiteMinder Login smpwservicescgi.exe redirect

LOW 28

A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00717 Published 2022-03-28 No fix listed CWE-601

TI-2001-01407 CVE-2001-1455 · GHSA-rcpw-62v6-qxgm

Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via…

LOW 37

Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02061 Published 2005-04-21 No fix listed

TI-2004-00613 CVE-2004-0672 · GHSA-g8jh-fhxp-q879

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that st…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02014 Published 2004-07-13 No fix listed

TI-2004-00389 CVE-2004-0425 · GHSA-5fhm-3rf4-cfq4

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to…

MEDIUM 51

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04986 Published 2004-05-05 No fix listed

TI-2000-00840 CVE-2000-0850 · GHSA-5vj6-cjv9-5x62

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication…

LOW 36

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01692 Published 2001-01-22 No fix listed