CS
Product
Certificate System
18
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Certificate System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20179 | 8.1 | Mar 15 | A flaw was found in pki-core Affected: 10.0 |
| CVE-2017-7509 | 6.5 | Jul 26 | An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1 Affected: before 8.1.20-1 |
| CVE-2022-2393 | 5.7 | Jul 14 | A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled Affected: 9.0; 10.0 |
| CVE-2020-1696 | 5.4 | Mar 20 | A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting… Affected: 9.0; 10.0 |
| CVE-2019-10180 | 4.8 | Mar 31 | A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly… Affected: 10.0 |
| CVE-2013-1886 | – | Jan 24 | Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote… Affected: 8.1 |
| CVE-2013-1885 | – | Jan 24 | Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and… Affected: 8.1 |
| CVE-2012-4556 | – | Jan 4 | The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process… Affected: through 8.1.1; 7.1; 7.2; 7.3; 8.0; 8.1 |
| CVE-2012-4555 | – | Jan 4 | The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote… Affected: through 8.1.1; 7.1; 7.2; 7.3; 8; 8.0; +1 more |
| CVE-2012-4543 | – | Jan 4 | Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: through 8.1.1; 7.1; 7.2; 7.3; 8; 8.0; +1 more |
| CVE-2012-3367 | – | Aug 13 | Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows… Affected: through 8.1; 7.1; 7.2; 7.3; 8; 8.0 |
| CVE-2012-2662 | – | Aug 13 | Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web… Affected: through 8.1; 7.1; 7.2; 7.3; 8; 8.0 |
| CVE-2010-3869 | – | Nov 17 | Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single… Affected: 7.3; 8 |
| CVE-2010-3868 | – | Nov 17 | Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers… Affected: 7.3; 8 |
| CVE-2009-0588 | – | May 27 | agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to… Affected: 7.3 |
| CVE-2008-5082 | – | Jan 30 | The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully… Affected: 7.1; 7.2; 7.3 |
| CVE-2008-2368 | – | Jan 20 | Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak… Affected: 7.2 |
| CVE-2008-2367 | – | Jan 20 | Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by… Affected: 7.2 |
Showing 18