CVE-2010-0640: Ca Ehealth Performance Manager

Low severity, CVSS 2.6. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.

Affected products

• Ca Ehealth Performance Manager: version 6.0 only; version 6.1 only; version 6.2 only

Published 2010-02-24. Last modified 2026-06-16.