Ca API Developer Portal vulnerabilities

3 CVEs affecting Ca API Developer Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6588, published 2018-03-29.

More from Ca.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6588, published 2018-03-29. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.
• CVE-2018-6587, published 2018-03-29. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.
• CVE-2018-6586, published 2018-03-29. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.