CVE-2018-6587

CVE-2018-6587

Vendor Ca Technologies

Product CA API Developer Portal

Weakness CWE-79 · XSS

Published March 29, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.

Key dates

02Disclosure timeline

March 29, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-6587 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2026-27502 SVXportal <= 2.5 log.php Search Reflected XSS CVE-2024-50501 WordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-49304 WordPress Search with Typesense plugin <= 2.0.10 - Cross Site Scripting (XSS) Vulnerability CVE-2024-7844 SourceCodester Online Graduate Tracer System add_acc.php cross site scripting CVE-2023-26123