Ca vulnerabilities
133 vulnerabilities
Known vulnerabilities in Ca products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 108 products.
Products
50 of 108- Brightstor Arcserve Backup19 vulnerabilities
- Etrust Secure Content Manager15 vulnerabilities
- Protection Suites13 vulnerabilities
- Arcserve Backup11 vulnerabilities
- Business Protection Suite11 vulnerabilities
- Etrust Antivirus8 vulnerabilities
- Etrust Intrusion Detection7 vulnerabilities
- Anti Virus For The Enterprise5 vulnerabilities
- Unicenter Management5 vulnerabilities
- Unicenter Software Delivery5 vulnerabilities
- Unified Infrastructure Management5 vulnerabilities
- Client Automation4 vulnerabilities
- Cloud Service Management4 vulnerabilities
- Ehealth Performance Manager4 vulnerabilities
- Gateway Security4 vulnerabilities
- Project Portfolio Management4 vulnerabilities
- Service Desk Manager4 vulnerabilities
- Unicenter Asset Management4 vulnerabilities
- Unicenter Enterprise Job Manager4 vulnerabilities
- Unicenter Tng4 vulnerabilities
- Universal Job Management Agent4 vulnerabilities
- Virtual Assurance For Infrastructure Managers4 vulnerabilities
- Workload Automation Ae4 vulnerabilities
- Xosoft Content Distribution4 vulnerabilities
- Xosoft High Availability4 vulnerabilities
- Xosoft Replication4 vulnerabilities
- Api Developer Portal3 vulnerabilities
- Ehealth3 vulnerabilities
- Etrust Admin3 vulnerabilities
- Etrust Vet Antivirus3 vulnerabilities
- Host Based Intrusion Prevention System3 vulnerabilities
- Network And Systems Management3 vulnerabilities
- Nsm Job Management Option3 vulnerabilities
- Threat Manager3 vulnerabilities
- Anti Virus2 vulnerabilities
- Anti Virus Gateway2 vulnerabilities
- Anti Virus Plus2 vulnerabilities
- Arcot Webfort Versatile Authentication Server2 vulnerabilities
- Brightstor Arcserve Backup Agent2 vulnerabilities
- Common Services2 vulnerabilities
- Etrust Anti Virus Gateway2 vulnerabilities
- Etrust Ez Antivirus2 vulnerabilities
- Identityminder2 vulnerabilities
- Messaging2 vulnerabilities
- Risk Authentication2 vulnerabilities
- Siteminder2 vulnerabilities
- Strong Authentication2 vulnerabilities
- Threat Manager For The Enterprise2 vulnerabilities
- Unicenter Remote Control2 vulnerabilities
- Unicenter Web Services Distributed Management2 vulnerabilities
CVE-2018-13819ca_technologiesunified_infrastructure_management+1
EPSS score1.38%
A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.CVE-2018-13824broadcomproject_portfolio_management+2EPSS score1.75%
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.CVE-2018-13826broadcomproject_portfolio_management+2EPSS score1.83%
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.CVE-2018-13823broadcomproject_portfolio_management+2EPSS score1.88%
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.CVE-2018-13821ca_technologiesunified_infrastructure_management+1EPSS score2.68%
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing.CVE-2018-13820ca_technologiesunified_infrastructure_management+1EPSS score1.38%
A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.CVE-2018-13825broadcomproject_portfolio_management+2EPSS score0.90%
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.CVE-2018-19634broadcomservice_desk_manager+2EPSS score1.33%
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.CVE-2018-19635broadcomservice_desk_manager+2EPSS score1.18%
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.CVE-2018-9027ca technologiesca privileged access manager+1EPSS score0.90%
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link.CVE-2018-6586ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.CVE-2018-6589ca technologiesca spectrum+1EPSS score1.72%
CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.CVE-2018-6587ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.CVE-2018-6588ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.CVE-2018-8953ca technologiesworkload automation ae+1EPSS score2.66%
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request.CVE-2018-8954ca technologiesworkload control center+1EPSS score7.04%
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.CVE-2003-0998broadcomunicenter_remote_control+3EPSS score0.37%
Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account.CVE-2013-5968broadcomsiteminder+1EPSS score2.62%
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.CVE-2021-28249caehealth_performance_managerEPSS score0.41%
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. NOTE: This vulnerability only affects products that are no longer supported by the maintainerCVE-2021-28247caehealth_performance_managerEPSS score0.74%
CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting attack against the platform users. The affected endpoints are: cgi/nhWeb with the parameter report, aviewbin/filtermibobjects.pl with the parameter namefilter, and aviewbin/query.pl with the parameters System, SystemText, Group, and GroupText. NOTE: This vulnerability only affects products that are no longer supported by the maintainer