Ca Technologies CA Privileged Access Manager vulnerabilities
10 vulnerabilities
Known vulnerabilities in Ca Technologies CA Privileged Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-9027ca technologiesca privileged access manager+1
EPSS score0.90%
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link.CVE-2018-9025broadcomprivileged_access_manager+1EPSS score1.39%
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.CVE-2018-9029broadcomprivileged_access_manager+1EPSS score1.73%
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.CVE-2018-9021broadcomprivileged_access_manager+1EPSS score9.61%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.CVE-2018-9022broadcomprivileged_access_manager+1EPSS score12.80%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.CVE-2018-9026broadcomprivileged_access_manager+1EPSS score1.32%
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.CVE-2018-9028broadcomprivileged_access_manager+1EPSS score0.90%
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.CVE-2018-9024broadcomprivileged_access_manager+1EPSS score1.13%
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.CVE-2018-9023broadcomprivileged_access_manager+1EPSS score1.88%
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.CVE-2015-4664broadcomprivileged_access_manager+2EPSS score20.58%
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.