Privileged Access Manager (Broadcom) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2019-02-26. Vendor: Broadcom.
CVEs of Privileged Access Manager
- CVE-2019-7392 - CVSS 9.1 (critical), 2019-02-26: An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive…
- CVE-2018-9022 - CVSS 9.8 (critical), 2018-06-18: An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by…
- CVE-2018-9025 - CVSS 7.5 (high), 2018-06-18: An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.
- CVE-2018-9029 - CVSS 9.8 (critical), 2018-06-18: An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
- CVE-2018-9021 - CVSS 9.8 (critical), 2018-06-18: An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially…
- CVE-2018-9024 - CVSS 5.3 (medium), 2018-06-18: An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
- CVE-2018-9028 - CVSS 7.5 (high), 2018-06-18: Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
- CVE-2015-4664 - CVSS 9.8 (critical), 2018-06-18: An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.
- CVE-2018-9023 - CVSS 8.8 (high), 2018-06-18: An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted…
- CVE-2018-9026 - CVSS 7.5 (high), 2018-06-18: A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
