CA Service Desk contains multiple vulnerabilities that can allow a remote attacker to conduct cross-site scripting attacks. CA has issued patches to address the vulnerabilities. Versions affected include CA Service Desk r11.2, CA CMDB 11.0, CA CMDB 11.1, and CA CMDB 11.2.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70392/caservice-xss.txt
Source: https://packetstormsecurity.com/files/70392/caservice-xss.txt.html