Certificate System (Redhat) - vulnerabilities (CVEs)

33 CVEs, 1 in the last 30 days, 15 known versions, newest CVE from 2026-10-02. Vendor: Redhat.

CVEs of Certificate System

• CVE-2026-104988 - CVSS 8.1 (high), 2026-10-02: A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via…
• CVE-2026-80110 - CVSS 8.1 (high), 2026-09-21: A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string…
• CVE-2026-89058 - CVSS 7.4 (high), 2026-09-18: A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the…
• CVE-2026-89059 - CVSS 7.5 (high), 2026-09-18: A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image…
• CVE-2026-76561 - CVSS 7.2 (high), 2026-09-08: A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate…
• CVE-2026-53682 - CVSS 5.3 (medium), 2026-09-01: An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating…
• CVE-2026-11873 - CVSS 6.5 (medium), 2026-09-01: An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated…
• CVE-2026-78323 - CVSS 6.5 (medium), 2026-08-24: A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing…
• CVE-2026-18369 - CVSS 5.8 (medium), 2026-07-30: A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP…
• CVE-2026-18047 - CVSS 6.5 (medium), 2026-07-28: A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints.…
• CVE-2026-17039 - CVSS 3.1 (low), 2026-07-24: A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment…
• CVE-2026-12353 - CVSS 5.3 (medium), 2026-07-23: An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS…
• CVE-2026-54513 - CVSS 8.1 (high), 2026-06-23: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and…
• CVE-2026-40542 - CVSS 7.3 (high), 2026-04-22: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper…
• CVE-2026-29062 - CVSS 8.7 (high), 2026-03-06: jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. From version 3.0.0 to before…
• CVE-2022-2393 - CVSS 5.7 (medium), 2022-07-14: A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This…
• CVE-2021-20179 - CVSS 8.1 (high), 2021-03-15: A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over…
• CVE-2019-10180 - CVSS 4.8 (medium), 2020-03-31: A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the…
• CVE-2020-1696 - CVSS 5.4 (medium), 2020-03-20: A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored…
• CVE-2017-7509 - CVSS 6.5 (medium), 2018-07-26: An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not…
• CVE-2013-1886 - CVSS 7.5 (high), 2014-01-24: Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10…
• CVE-2013-1885 - CVSS 4.3 (medium), 2014-01-24: Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag…
• CVE-2012-4556 - CVSS 4 (medium), 2013-01-04: The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web…
• CVE-2012-4555 - CVSS 4 (medium), 2013-01-04: The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations,…
• CVE-2012-4543 - CVSS 4.3 (medium), 2013-01-04: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or…
• CVE-2012-3367 - CVSS 5.5 (medium), 2012-08-13: Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web…
• CVE-2012-2662 - CVSS 4.3 (medium), 2012-08-13: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to…
• CVE-2010-3869 - CVSS 4 (medium), 2010-11-17: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by…
• CVE-2010-3868 - CVSS 5.8 (medium), 2010-11-17: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which…
• CVE-2009-0588 - CVSS 6.5 (medium), 2009-05-27: agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote…
• CVE-2008-5082 - CVSS 6 (medium), 2009-01-30: The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0…
• CVE-2008-2368 - CVSS 2.1 (low), 2009-01-20: Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files,…
• CVE-2008-2367 - CVSS 2.1 (low), 2009-01-20: Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to…