Broadcom Symantec Siteminder vulnerabilities

3 CVEs affecting Broadcom Symantec Siteminder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3862, published 2026-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-10001, published 2022-03-28. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The…
CVE-2024-36459, published 2024-06-14. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an…
CVE-2026-3862, published 2026-03-10. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.