Ca Arcot Webfort Versatile Authentication Server vulnerabilities

2 CVEs affecting Ca Arcot Webfort Versatile Authentication Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1826, published 2011-05-05.

More from Ca.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1826, published 2011-05-05. Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days. Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and…
• CVE-2011-1825, published 2011-05-05. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web…