Broadcom Privileged Access Manager vulnerabilities
10 vulnerabilities
Known vulnerabilities in Broadcom Privileged Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-9025broadcomprivileged_access_manager+1
EPSS score1.39%
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.CVE-2018-9029broadcomprivileged_access_manager+1EPSS score1.73%
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.CVE-2018-9021broadcomprivileged_access_manager+1EPSS score9.61%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.CVE-2018-9022broadcomprivileged_access_manager+1EPSS score12.80%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.CVE-2018-9026broadcomprivileged_access_manager+1EPSS score1.32%
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.CVE-2018-9028broadcomprivileged_access_manager+1EPSS score0.90%
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.CVE-2018-9024broadcomprivileged_access_manager+1EPSS score1.13%
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.CVE-2018-9023broadcomprivileged_access_manager+1EPSS score1.88%
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.CVE-2015-4664broadcomprivileged_access_manager+2EPSS score20.58%
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.CVE-2019-7392broadcomprivileged_access_managerEPSS score1.72%
An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration.