DO
Vendor
Dogtagpki
16
CVEs
0
On KEV
0
New 30D
Products
DO8.1
Dogtagpki
Dogtagpki
14 CVEs0 on KEV0 new
NS7.5
Network Security Services For Java
Dogtagpki
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-4132 | NS Network Security Services For Java Dogtagpki | 5.9 | Oct 4 | A flaw was found in JSS |
| CVE-2021-4213 | NS Network Security Services For Java Dogtagpki | 7.5 | Aug 24 | A flaw was found in JSS, where it did not properly free up all memory |
| CVE-2022-2414 | DO Dogtagpki Dogtagpki | 7.5 | Jul 29 | Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks |
| CVE-2021-3551 | DO Dogtagpki Dogtagpki | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file |
| CVE-2020-25715 | DO Dogtagpki Dogtagpki | 6.1 | May 28 | A flaw was found in pki-core 10.9.0 |
| CVE-2020-1721 | DO Dogtagpki Dogtagpki | 6.1 | Apr 30 | A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a… |
| CVE-2021-20179 | DO Dogtagpki Dogtagpki | 8.1 | Mar 15 | A flaw was found in pki-core |
| CVE-2020-15720 | DO Dogtagpki Dogtagpki | 6.8 | Jul 14 | In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation |
| CVE-2019-10180 | DO Dogtagpki Dogtagpki | 4.8 | Mar 31 | A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly… |
| CVE-2020-1696 | DO Dogtagpki Dogtagpki | 5.4 | Mar 20 | A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting… |
| CVE-2019-10221 | DO Dogtagpki Dogtagpki | 6.1 | Mar 20 | A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server |
| CVE-2019-10179 | DO Dogtagpki Dogtagpki | 6.1 | Mar 20 | A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a… |
| CVE-2019-10178 | DO Dogtagpki Dogtagpki | 6.1 | Mar 18 | It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2019-10146 | DO Dogtagpki Dogtagpki | 4.7 | Mar 18 | A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate… |
| CVE-2017-7537 | DO Dogtagpki Dogtagpki | 7.5 | Jul 26 | It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4 |
| CVE-2018-1080 | DO Dogtagpki Dogtagpki | 8.1 | Jul 3 | Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed |