description: CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: CA API Developer Portal
vendor: CA Technologies
versions:
lessThan: 3.5 CR6, status: affected, version: 3.5, versionType: custom
}