CVE-2011-1825: Ca Arcot Webfort Versatile Authentication Server

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Ca Arcot Webfort Versatile Authentication Server: up to and including 6.2.4

Published 2011-05-05. Last modified 2026-06-16.