Unknown Pki Core/Pki Kra vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Pki Core/Pki Kra, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2019-10179[unknown] · pki-core/pki-kra +4 more[unknown] pki-core/pki-kraA vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.CVSS6.1MediumEPSS0.94%