Ca Technologies vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in Ca Technologies products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.
CVE-2018-15691broadcomrelease_automation+1
EPSS score16.76%
Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary code.CVE-2018-6586ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.CVE-2018-6589ca technologiesca spectrum+1EPSS score1.72%
CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.CVE-2018-6587ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.CVE-2018-6590broadcomca_api_developer_portal+1EPSS score0.75%
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.CVE-2018-6588ca technologiesca api developer portal+1EPSS score0.88%
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.CVE-2018-8953ca technologiesworkload automation ae+1EPSS score2.66%
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request.CVE-2018-8954ca technologiesworkload control center+1EPSS score7.04%
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.CVE-2015-4664broadcomprivileged_access_manager+2EPSS score20.58%
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.CVE-2016-5803ca_technologiesunified_infrastructure_managementEPSS score2.31%
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.CVE-2017-9393ca technologiesidentity manager+2EPSS score1.68%
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.CVE-2017-9394ca technologiesca identity governance+1EPSS score0.64%
A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user.CVE-2019-13656broadcomca_client_automation+3EPSS score5.82%
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code.