Login Request a demo
AK
Vendor
Akamai
11 products with CVEs on record
23
CVEs
0
On KEV
5
New 30D
Products
GP
Guardicore Platform Agent
Akamai
8.5
7 CVEs0 on KEV5 new
AK
AkamaiGhost
Akamai
4.8
3 CVEs0 on KEV0 new
CL
CloudTest
Akamai
9.8
3 CVEs0 on KEV0 new
EA
Enterprise Application Access
Akamai
9.8
3 CVEs0 on KEV0 new
AA
App & API Protector
Akamai
5.4
1 CVEs0 on KEV0 new
DM
Download Manager
Akamai
–
1 CVEs0 on KEV0 new
GH
Ghost
Akamai
4.0
1 CVEs0 on KEV0 new
NE
Netsession
Akamai
9.8
1 CVEs0 on KEV0 new
RC
Rate Control
Akamai
3.7
1 CVEs0 on KEV0 new
SI
Secure Internet Access Enterprise Threatavert
Akamai
7.1
1 CVEs0 on KEV0 new
ZT
Zero Trust Client
Akamai
7.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-50216
GP
Guardicore Platform Agent
Akamai
5.3
0%
Oct 14An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a…
CVE-2026-50217
GP
Guardicore Platform Agent
Akamai
4.7
0%
Oct 14A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system…
CVE-2026-50218
GP
Guardicore Platform Agent
Akamai
8.5
0%
Oct 14Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding
CVE-2026-46449
GP
Guardicore Platform Agent
Akamai
6.7
2%
Oct 14The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component
CVE-2026-50215
GP
Guardicore Platform Agent
Akamai
4.4
0%
Oct 14A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4
CVE-2026-34354
ZT
Zero Trust Client
Akamai
7.4
0%
May 8Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation
CVE-2026-26365
GH
Ghost
Akamai
4.0
0%
Feb 23Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection:…
CVE-2025-66373
AK
Akamaighost
Akamai
4.8
0%
Dec 4Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling
CVE-2025-53841
GP
Guardicore Platform Agent
Akamai
7.8
0%
Dec 3The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege…
CVE-2025-54142
AK
AkamaiGhost
Akamai
4.0
0%
Aug 29Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent…
CVE-2025-32094
AK
AkamaiGhost
Akamai
4.0
1%
Aug 7An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26
CVE-2025-54568
RC
Rate Control
Akamai
3.7
0%
Jul 25Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node
CVE-2025-52491
CL
CloudTest
Akamai
5.8
0%
Jun 30Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF
CVE-2025-49493
CL
CloudTest
Akamai
5.8
2%
Jun 30Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection
CVE-2025-30143
AA
App & API Protector
Akamai
5.4
0%
Mar 17Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions…
CVE-2025-24527
EA
Enterprise Application Access
Akamai
8.0
0%
Jan 29An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17
CVE-2024-45164
SI
Secure Internet Access Enterprise Threatavert
Akamai
7.1
0%
Nov 4Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or…
CVE-2021-40683
EA
Enterprise Application Access
Akamai
7.8
0%
Oct 4In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of…
CVE-2019-18847
EA
Enterprise Application Access
Akamai
9.8
2%
Aug 26Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1
CVE-2019-11011
CL
Cloudtest
Akamai
9.8
3%
Jun 21Akamai CloudTest before 58.30 allows remote code execution
CVE-2016-10157
NE
Netsession
Akamai
9.8
2%
Jan 23Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path
CVE-2008-1770
DM
Download Manager
Akamai
–
10%
Jun 4CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL…