3 matches found
CVE-2007-2230
CVE-2007-2230 describes a SQL injection vulnerability in the CA Clever Path Portal. The issue allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents through multiple vectors, notably the ofinterest parameter in a light search query and the descr...
CVE-2005-4150
The CVE-2005-4150 entry describes a Cross-site scripting (XSS) vulnerability in the portal login page of Computer Associates CleverPath 4.7. Affects CleverPath 4.7; the vectors are described as unknown in the provided description. The NVD metrics list a CVSS v2 base score of 4.3 (Medium) with imp...
CVE-2006-6641
CA CleverPath Portal before maintenance 4.71.001_179_060830 (and related products BrightStor Portal r11.1, CleverPath Aion BPM r10–r10.2, eTrust Security Command Center r1/r8, Unicenter) is affected by a vulnerability where multiple Portal servers sharing a single data store can cause a Portal us...