CVE-2018-13825: Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 1...

Security readout for executives and security teams

CA PPM contains a reflected cross-site scripting issue in gridExcelExport. A remote attacker could cause malicious script to run in a user's browser if that user interacts with attacker-controlled input. The bundle does not provide CVSS, patch details, or evidence of exploitation. Exposure is most likely where affected CA PPM versions are reachable by users through web access. Risk depends on authentication, user roles, browser protections, and whether the affected gridExcelExport functionality is accessible in deployed workflows. Handle as a moderate-priority application security issue. It is not shown as actively exploited in the bundle, but affected CA PPM systems may process sensitive project and business data, making browser-side compromise relevant. Mitigation focus: Confirm whether any CA PPM deployment matches the affected versions and cumulative patch levels.; Review the CA security notice for supported remediation or fixed build guidance.; Prioritize vendor-supported updates where affected versions are confirmed..

Prepared

Jun 7, 2026, 05:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.