Ca Api Developer Portal (Broadcom) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2020-04-15. Vendor: Broadcom.
CVEs of Ca Api Developer Portal
- CVE-2020-11659 - CVSS 4.3 (medium), 2020-04-15: CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.
- CVE-2020-11658 - CVSS 9.8 (critical), 2020-04-15: CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.
- CVE-2020-11660 - CVSS 6.5 (medium), 2020-04-15: CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.
- CVE-2020-11665 - CVSS 6.1 (medium), 2020-04-15: CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
- CVE-2020-11666 - CVSS 8.8 (high), 2020-04-15: CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.
- CVE-2020-11662 - CVSS 7.5 (high), 2020-04-15: CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and…
- CVE-2020-11661 - CVSS 8.1 (high), 2020-04-15: CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.
- CVE-2020-11664 - CVSS 6.1 (medium), 2020-04-15: CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
- CVE-2020-11663 - CVSS 6.1 (medium), 2020-04-15: CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.
- CVE-2018-6590 - CVSS 6.1 (medium), 2018-08-03: CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.
