ldap-account-manager vulnerabilities (Debian)

19 vulnerabilities.

• ldap-account-manager Debian LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session CVE-2026-55167 Fix available 4.2 MediumOctober 14, 2026
• ldap-account-manager Debian LAM has incorrect regular expression in PDF export component that allows user to upload files of any type CVE-2026-27895 Fix available 4.3 MediumMarch 17, 2026
• ldap-account-manager Debian LAM has Authenticated Local File Inclusion (LFI) in PDF export CVE-2026-27894 Fix available 8.8 HighMarch 17, 2026
• ldap-account-manager Debian LAM profile editor stored cross-site scripting vulnerability CVE-2025-58174 Fix available 4.6 MediumSeptember 16, 2025
• ldap-account-manager Debian Arbitrary config values override in lam CVE-2024-52792 Fix available 6.5 MediumDecember 17, 2024
• ldap-account-manager Debian LAM vulnerable to Authenticated Remote Code Execution CVE-2024-23333 Fix available EPSS 17.8% 7.9 HighMarch 18, 2024
• ldap-account-manager Debian Missing Encryption of Sensitive Data in ldap-account-manager CVE-2022-31085 Fix available 5.5 MediumJune 27, 2022
• ldap-account-manager Debian Unauthenticated Remote Code Execution in ldap-account-manager CVE-2022-31084 Fix available 9.0 CriticalJune 27, 2022
• ldap-account-manager Debian Incorrect Regular Expressions in ldap-account-manager CVE-2022-31086 Fix available 6.6 MediumJune 27, 2022
• ldap-account-manager Debian Incorrect Default Permissions in ldap-account-manager CVE-2022-31087 Fix available 7.8 HighJune 27, 2022
• ldap-account-manager Debian Unauthenticated LDAP Injection in ldap-account-manager CVE-2022-31088 Fix available 6.5 MediumJune 27, 2022
• ldap-account-manager Debian Stored XSS and path traversal in LDAPAccountManager/lam CVE-2022-24851 Fix available 8.1 HighApril 15, 2022
• ldap-account-manager Debian A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the... CVE-2012-1115 Fix available 6.1 MediumDecember 5, 2019
• ldap-account-manager Debian A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the... CVE-2012-1114 Fix available 6.1 MediumDecember 5, 2019
• ldap-account-manager Debian Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the... CVE-2018-8764 Fix available 8.8 HighMarch 27, 2018
• ldap-account-manager Debian Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to... CVE-2018-8763 Fix available 6.1 MediumMarch 27, 2018
• ldap-account-manager Debian Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3... CVE-2013-4453 Fix available 4.3 MediumNovember 5, 2013
• ldap-account-manager Debian lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special... CVE-2007-1840 Fix available 4.3 MediumApril 3, 2007
• ldap-account-manager Debian Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0... CVE-2006-7191 Fix available 7.2 HighApril 3, 2007