What’s Vulnerable › Vulnerabilities

CVE-2023-23956

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-30 · updated 2026-06-17
• Weakness: CWE-79

Description

A user can supply malicious HTML and JavaScript code that will be executed in the client browser

Affected products

• Symantec SiteMinder WebAgent: 12.52

References

• http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html
• https://support.broadcom.com/external/content/SecurityAdvisories/0/22221
• http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html
• https://support.broadcom.com/external/content/SecurityAdvisories/0/22221
• https://packetstorm.news/files/id/173038

Get alerted when CVE-2023-23956 or the next vulnerability affects your stack