Akana API Platform vulnerabilities
5 vulnerabilities
Known vulnerabilities in Akana API Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-2796akanaakana api platform
EPSS score0.44%
A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.3. Reported by Jakob Antonsson.CVE-2024-5250akanaakana api platform+1EPSS score0.30%
In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrationsCVE-2024-5249akanaakana api platform+1EPSS score0.22%
In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.CVE-2024-3930akanaakana api platform+1EPSS score0.31%
In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.CVE-2024-3826akanaakana api platformEPSS score0.34%
In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.