Vulnerability Description
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Project Portfolio Management | <= 14.3 |
| Ca | Project Portfolio Management | 15.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
FAQ
What is CVE-2018-13825?
CVE-2018-13825 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross...
How severe is CVE-2018-13825?
CVE-2018-13825 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-13825?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Project Portfolio Management, Ca Project Portfolio Management.