CVE-2026-3862 — Cross-Site Scripting Vulnerability in SiteMinder Administrative UI

CVE-2026-3862

Cross-Site Scripting Vulnerability in SiteMinder Administrative UI PUBLISHED

Description (CNA)

Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.

Affected (CNA)

Vendor / product	Versions
Broadcom / SiteMinder	affected 12.9; affected 12.8.x

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37176

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.