CVE-2018-6586

EPSS 0.9%CWE-79

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

29 Mar 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.

Affected products

Want to know if your infrastructure is exposed to this?

References