Login Request a demo
CA
Vendor
CA
107 products with CVEs on record
291
CVEs
0
On KEV
0
New 30D
Products
BA
Brightstor Arcserve Backup
CA
–
19 CVEs0 on KEV0 new
ES
Etrust Secure Content Manager
CA
–
15 CVEs0 on KEV0 new
PS
Protection Suites
CA
–
13 CVEs0 on KEV0 new
AB
Arcserve Backup
CA
–
11 CVEs0 on KEV0 new
BP
Business Protection Suite
CA
–
11 CVEs0 on KEV0 new
EA
Etrust Antivirus
CA
–
8 CVEs0 on KEV0 new
EI
Etrust Intrusion Detection
CA
–
7 CVEs0 on KEV0 new
AF
Anti-virus For The Enterprise
CA
–
5 CVEs0 on KEV0 new
UM
Unicenter Management
CA
–
5 CVEs0 on KEV0 new
US
Unicenter Software Delivery
CA
–
5 CVEs0 on KEV0 new
UI
Unified Infrastructure Management
CA
9.8
5 CVEs0 on KEV0 new
CA
Client Automation
CA
5.5
4 CVEs0 on KEV0 new
CS
Cloud Service Management
CA
–
4 CVEs0 on KEV0 new
EP
Ehealth Performance Manager
CA
8.8
4 CVEs0 on KEV0 new
GS
Gateway Security
CA
–
4 CVEs0 on KEV0 new
HB
Host Based Intrusion Prevention System
CA
–
4 CVEs0 on KEV0 new
IS
Internet Security Suite 2008
CA
–
4 CVEs0 on KEV0 new
IS
Internet Security Suite Plus 2008
CA
–
4 CVEs0 on KEV0 new
PP
Project Portfolio Management
CA
9.8
4 CVEs0 on KEV0 new
SD
Service Desk Manager
CA
9.8
4 CVEs0 on KEV0 new
UA
Unicenter Asset Management
CA
–
4 CVEs0 on KEV0 new
UE
Unicenter Enterprise Job Manager
CA
–
4 CVEs0 on KEV0 new
UT
Unicenter Tng
CA
–
4 CVEs0 on KEV0 new
UJ
Universal Job Management Agent
CA
7.8
4 CVEs0 on KEV0 new
VA
Virtual Assurance For Infrastructure Managers
CA
7.8
4 CVEs0 on KEV0 new
WA
Workload Automation AE
CA
8.8
4 CVEs0 on KEV0 new
XC
Xosoft Content Distribution
CA
–
4 CVEs0 on KEV0 new
XH
Xosoft High Availability
CA
–
4 CVEs0 on KEV0 new
XR
Xosoft Replication
CA
–
4 CVEs0 on KEV0 new
AD
Api Developer Portal
CA
6.1
3 CVEs0 on KEV0 new
EH
Ehealth
CA
8.8
3 CVEs0 on KEV0 new
EA
Etrust Admin
CA
–
3 CVEs0 on KEV0 new
EV
Etrust Vet Antivirus
CA
–
3 CVEs0 on KEV0 new
NA
Network And Systems Management
CA
–
3 CVEs0 on KEV0 new
NJ
Nsm Job Management Option
CA
–
3 CVEs0 on KEV0 new
TM
Threat Manager
CA
–
3 CVEs0 on KEV0 new
AN
Anti-virus
CA
–
2 CVEs0 on KEV0 new
AG
Anti-virus Gateway
CA
–
2 CVEs0 on KEV0 new
AP
Anti-virus Plus
CA
–
2 CVEs0 on KEV0 new
AW
Arcot Webfort Versatile Authentication Server
CA
–
2 CVEs0 on KEV0 new
AB
Arcserve Backup 2000
CA
–
2 CVEs0 on KEV0 new
AF
Arcserve For Windows Client Agent
CA
–
2 CVEs0 on KEV0 new
AF
Arcserve For Windows Server Component
CA
–
2 CVEs0 on KEV0 new
BA
Brightstor Arcserve Backup Agent
CA
–
2 CVEs0 on KEV0 new
CS
Common Services
CA
–
2 CVEs0 on KEV0 new
EA
Etrust Anti-virus Gateway
CA
–
2 CVEs0 on KEV0 new
EA
Etrust Anti-virus Sdk
CA
–
2 CVEs0 on KEV0 new
EE
Etrust EZ Antivirus
CA
–
2 CVEs0 on KEV0 new
ID
Identityminder
CA
–
2 CVEs0 on KEV0 new
IS
Internet Security Suite 2010
CA
–
2 CVEs0 on KEV0 new
IS
Internet Security Suite Plus 2009
CA
–
2 CVEs0 on KEV0 new
ME
Messaging
CA
–
2 CVEs0 on KEV0 new
RA
Risk Authentication
CA
8.8
2 CVEs0 on KEV0 new
SI
Siteminder
CA
–
2 CVEs0 on KEV0 new
SA
Strong Authentication
CA
8.8
2 CVEs0 on KEV0 new
TM
Threat Manager For The Enterprise
CA
–
2 CVEs0 on KEV0 new
TM
Threat Manager Total Defense
CA
–
2 CVEs0 on KEV0 new
UR
Unicenter Remote Control
CA
–
2 CVEs0 on KEV0 new
UW
Unicenter Web Services Distributed Management
CA
–
2 CVEs0 on KEV0 new
AD
Advantage Data Transport
CA
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2021-28250
EP
Ehealth Performance Manager
CA
7.8
0%
Mar 26CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file
CVE-2021-28249
EP
Ehealth Performance Manager
CA
8.8
0%
Mar 26CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library
CVE-2021-28247
EP
Ehealth Performance Manager
CA
5.4
1%
Mar 26CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS)
CVE-2019-7394
RA
Risk Authentication
CA
8.8
3%
May 28A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication…
CVE-2019-7393
RA
Risk Authentication
CA
4.3
2%
May 28A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x,…
CVE-2018-19635
SD
Service Desk Manager
CA
9.8
1%
Jan 22CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface
CVE-2018-19634
SD
Service Desk Manager
CA
7.5
1%
Jan 22CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information
CVE-2018-13826
PP
Project Portfolio Management
CA
9.1
2%
Aug 30An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct…
CVE-2018-13825
PP
Project Portfolio Management
CA
6.1
1%
Aug 30Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to…
CVE-2018-13824
PP
Project Portfolio Management
CA
9.8
2%
Aug 30Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL…
CVE-2018-13823
PP
Project Portfolio Management
CA
7.5
2%
Aug 30An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access…
CVE-2018-13821
UI
Unified Infrastructure Management
CA
9.8
3%
Aug 30A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing
CVE-2018-13820
UI
Unified Infrastructure Management
CA
7.5
1%
Aug 30A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information
CVE-2018-13819
UI
Unified Infrastructure Management
CA
7.5
1%
Aug 30A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information
CVE-2018-9027
CP
CA Privileged Access Manager
CA
6.1
1%
Jun 18A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link
CVE-2018-6589
SP
Spectrum
CA
7.5
2%
May 1CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors
CVE-2018-8954
WC
Workload Control Center
CA
9.8
7%
Apr 11CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request
CVE-2018-8953
WA
Workload Automation AE
CA
8.8
3%
Apr 11CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request
CVE-2018-6588
AD
Api Developer Portal
CA
6.1
1%
Mar 29CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer
CVE-2018-6587
AD
Api Developer Portal
CA
6.1
1%
Mar 29CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable
CVE-2018-6586
AD
Api Developer Portal
CA
6.1
1%
Mar 29CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing
CVE-2017-9394
IG
Identity Governance
CA
5.4
1%
Nov 14A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user
CVE-2017-9393
IM
Identity Manager
CA
9.8
2%
Sep 22CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search
CVE-2017-8391
CA
Client Automation
CA
5.5
0%
May 6The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system…
CVE-2016-9165
UI
Unified Infrastructure Management
CA
7.5
4%
Mar 20The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft…
CVE-2016-9164
UI
Unified Infrastructure Management
CA
7.5
5%
Mar 7Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure…
CVE-2016-9148
SD
Service Desk Manager
CA
6.1
2%
Mar 7Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2016-9795
UJ
Universal Job Management Agent
CA
7.8
1%
Jan 27The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers…
CVE-2016-10086
SD
Service Desk Management
CA
8.1
2%
Jan 18RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging…
CVE-2016-6152
EH
Ehealth
CA
8.8
3%
Jul 26CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors
CVE-2016-6151
EH
Ehealth
CA
8.8
3%
Jul 26CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors
CVE-2015-3318
CA
Client Automation
CA
–
0%
Jun 17CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
CVE-2015-3317
CA
Client Automation
CA
–
0%
Jun 17CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
CVE-2015-3316
CA
Client Automation
CA
–
0%
Jun 17CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
CVE-2014-8474
CS
Cloud Service Management
CA
–
3%
Nov 4CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and…
CVE-2014-8473
CS
Cloud Service Management
CA
–
1%
Nov 4Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims…
CVE-2014-8472
CS
Cloud Service Management
CA
–
2%
Nov 4CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to…
CVE-2014-8471
CS
Cloud Service Management
CA
–
2%
Nov 4CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors
CVE-2014-2210
EW
Erwin Web Portal
CA
–
5%
Apr 4Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass intended access restrictions, cause a denial…
CVE-2013-5968
WA
Web Agents
CA
–
3%
Oct 29Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via…
CVE-2012-6299
ID
Identityminder
CA
–
3%
Dec 26Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown…
CVE-2012-6298
ID
Identityminder
CA
–
3%
Dec 26Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to execute arbitrary commands or modify data via unknown…
CVE-2012-5973
XD
Xcom Data Transport
CA
–
4%
Dec 10CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request
CVE-2010-5156
IS
Internet Security Suite 2010
CA
–
0%
Aug 25Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would…
CVE-2012-1453
EV
Etrust Vet Antivirus
CA
–
98%
Mar 21The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee…
CVE-2012-1446
EV
Etrust Vet Antivirus
CA
–
100%
Mar 21The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman…
CVE-2012-1440
EV
Etrust Vet Antivirus
CA
–
78%
Mar 21The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote…
CVE-2011-4054
SI
Siteminder
CA
–
1%
Dec 8Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2011-3011
AD
Arcserve D2d
CA
–
72%
Aug 15BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands,…
CVE-2011-2667
GS
Gateway Security
CA
–
16%
Jul 28Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote…
CVE-2011-1899
EH
Ehealth
CA
–
1%
May 16Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2011-1826
AW
Arcot Webfort Versatile Authentication Server
CA
–
1%
May 4Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to…
CVE-2011-1825
AW
Arcot Webfort Versatile Authentication Server
CA
–
1%
May 4Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to…
CVE-2011-1718
SI
Siteminder
CA
–
2%
Apr 27The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct…
CVE-2011-1036
HI
Host-based Intrusion Prevention System
CA
–
3%
Feb 25The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA…
CVE-2011-0758
ES
Etrust Secure Content Manager
CA
–
8%
Feb 10The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute…
CVE-2010-3984
AR
Arcserve Replication And High Availability
CA
–
5%
Jan 7Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content…
CVE-2010-4502
IS
Internet Security Suite Plus 2010
CA
–
1%
Dec 8Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via…
CVE-2010-2193
WA
Webscan Active X Control
CA
–
6%
Jun 10Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote…
CVE-2010-1223
XC
Xosoft Content Distribution
CA
–
17%
Apr 7Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or…