CVE-2015-6853: Broadcom Single Sign-On

Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days.

The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.

Affected products

• Broadcom Single Sign-On: version r6.0 only; version r12.0 only; version r12.0j only; version r12.5 only; version r12.51 only; version r12.52 only

Published 2016-03-24. Last modified 2026-06-17.