CVE-2011-1899

CVE-2011-1899 describes multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2. The root cause is insufficient validation of sent request parameters, enabling remote attackers to inject arbitrary web script or HTML via unspecified parameters. The issue wa...

CVE-2011-1899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CA Internet Security Suite XMLSecDB ActiveX Insecure File Creation (CVE-2011-1036)

CA Internet Security Suite is a comprehensive home and office security system that protects against viruses, hackers, spam, and other online threats. An insecure file creation vulnerability exists in CA Internet Security Suite. The vulnerability is due to a design weakness in the XMLSecDB.DIParse...

CA Total Defense UNCWS DeleteReports SQL Injection

Added: 05/12/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...

CA Total Defense UNCWS DeleteReports SQL Injection

Added: 05/12/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...

CA Total Defense UNCWS DeleteReports SQL Injection

Added: 05/12/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...

CA20110510-01: Security Notice for CA eHealth

-----BEGIN PGP SIGNED MESSAGE----- CA20110510-01: Security Notice for CA eHealth Issued: May 10, 2011 CA Technologies support is alerting customers to a security risk with CA eHealth. A vulnerability exists that may potentially allow an attacker to compromise web user security. The vulnerability,...

CA eHealth crossite scripting

No description provided...

CVE-2011-1825

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Open redirect

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1826

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1825

CA Arcot WebFort Versatile Authentication Server (VAS) Administrative Console is affected by CVE-2011-1825, a set of XSS vulnerabilities due to insufficient handling of request parameters. Affects VAS versions prior to 6.2.5. The vulnerability allows remote attackers to inject arbitrary web scrip...

CVE-2011-1826

CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 is vulnerable to an open redirect in the Administrative Console due to insufficient filtering of a request parameter, enabling attackers to redirect users to arbitrary sites and facilitate phishing via crafted URLs. Affected prod...

CVE-2011-1825

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1825: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1826: Improper Input Validation

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CA Total Defense UNCWS SQL Injection

Added: 05/02/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...

CA Total Defense UNCWS SQL Injection

Added: 05/02/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...

CA Total Defense UNCWS SQL Injection

Added: 05/02/2011 CVE: CVE-2011-1653 BID: 47355 Background CA Total Defense is a combined host-based anti-virus, anti-spyware, firewall, and IPS solution. Problem CA Total Defense includes a web service management component, which in version r12 prior to SE2, fails to validate certain parameters...