Netegrity records
6 published records for vendor netegrity.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2004-0425No exploit | Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.netegrity · sideminder affiliate agent | Critical10.0 | — | 4.9% | Aug 18, 2004 |
31Monitor | CVE-2001-1455No exploit | Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.netegrity · siteminder | High7.5 | — | 2.0% | Aug 24, 2001 |
31Monitor | CVE-2000-0850No exploit | Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is netegrity · siteminder | High7.5 | — | 1.6% | Nov 14, 2000 |
28Monitor | CVE-2004-0672Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6netegrity · identityminder | Medium6.8 | — | 2.0% | Aug 6, 2004 |
27Monitor | CVE-2003-1311No exploit | siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, whichnetegrity · siteminder | Medium6.8 | — | 1.4% | Dec 31, 2003 |
17Monitor | CVE-2003-1312No exploit | siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which netegrity · siteminder | Medium4.3 | — | 1.0% | Dec 31, 2003 |
- CVE-2004-042541Plan
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
CriticalCVSS 10.0No exploitEPSS 4%netegrity · sideminder affiliate agentAug 18, 2004
- CVE-2001-145531Monitor
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.
HighCVSS 7.5No exploitEPSS 2%netegrity · siteminderAug 24, 2001
- CVE-2000-085031Monitor
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is
HighCVSS 7.5No exploitEPSS 1%netegrity · siteminderNov 14, 2000
- CVE-2004-067228Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6
MediumCVSS 6.8Proof of conceptEPSS 2%netegrity · identityminderAug 6, 2004
- CVE-2003-131127Monitor
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which
MediumCVSS 6.8No exploitEPSS 1%netegrity · siteminderDec 31, 2003
- CVE-2003-131217Monitor
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which
MediumCVSS 4.3No exploitEPSS 1%netegrity · siteminderDec 31, 2003