Unrated severityNVD Advisory· Published Sep 27, 2008· Updated Jun 16, 2026

CVE-2008-4119

Description

Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Service Desk Manager
cpe:2.3:a:broadcom:service_desk:11.2:*:*:*:*:*:*:*
Ca/Cmdb4 versions
cpe:2.3:a:ca:cmdb:11.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ca:cmdb:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:ca:cmdb:11.1:*:*:*:*:*:*:*
- cpe:2.3:a:ca:cmdb:11.2:*:*:*:*:*:*:*
- (no CPE)range: 11.0 - 11.2
Ca/Service Deskllm-fuzzy
Range: 11.2

Patches

Vulnerability mechanics

References

secunia.com/advisories/32038nvdVendor Advisory
community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspxnvd
securityreason.com/securityalert/4318nvd
www.securityfocus.com/archive/1/496755/100/0/threadednvd
www.securityfocus.com/bid/31412nvd
www.securitytracker.com/idnvd
www.vupen.com/english/advisories/2008/2673nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45416nvd
support.ca.com/irj/portal/anonymous/phpsupcontentnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000