PatchTheCVE: api developer portalhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-6588: CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability relhttps://patchthecve.com/cve/CVE-2018-6588.htmlhttps://patchthecve.com/cve/CVE-2018-6588.htmlWed, 17 Jun 2026 02:02:03 +0000MEDIUM 6.1: CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.CVE-2018-6587: CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability relhttps://patchthecve.com/cve/CVE-2018-6587.htmlhttps://patchthecve.com/cve/CVE-2018-6587.htmlWed, 17 Jun 2026 02:02:03 +0000MEDIUM 6.1: CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.CVE-2018-6586: CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability relatehttps://patchthecve.com/cve/CVE-2018-6586.htmlhttps://patchthecve.com/cve/CVE-2018-6586.htmlWed, 17 Jun 2026 02:02:03 +0000MEDIUM 6.1: CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.