Broadcom Cleverpath Portal vulnerabilities

3 CVEs affecting Broadcom Cleverpath Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2230, published 2007-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-6641, published 2006-12-20. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through…
CVE-2005-4150, published 2005-12-10. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
CVE-2007-2230, published 2007-04-25. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a…