PA
Product
Privileged Access Manager
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 1Low 0
Watch
Add Privileged Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9029 | 9.8 | Jun 18 | An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks Affected: 2.0.0 before 3.0.0 |
| CVE-2018-9022 | 9.8 | Jun 18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration… Affected: through 2.8.2 |
| CVE-2018-9021 | 9.8 | Jun 18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests Affected: through 2.8.2 |
| CVE-2015-4664 | 9.8 | Jun 18 | An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands Affected: through 2.4.4.4 |
| CVE-2019-7392 | 9.1 | Feb 26 | An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter… Affected: 3.0.1 through 3.0.3; 3.1.1 through 3.1.2; 3.2.0 through 3.2.1 |
| CVE-2018-9023 | 8.8 | Jun 18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the… Affected: 2.0.0 before 3.0.0 |
| CVE-2018-9028 | 7.5 | Jun 18 | Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking Affected: 2.0.0 before 3.0.0 |
| CVE-2018-9026 | 7.5 | Jun 18 | A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request Affected: 2.0.0 before 3.0.0 |
| CVE-2018-9025 | 7.5 | Jun 18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input Affected: 2.0.0 before 3.0.0 |
| CVE-2018-9024 | 5.3 | Jun 18 | An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file Affected: 2.0.0 before 3.0.0 |
Showing 10