Skip to content
Ca vulnerabilities
Products
Show 19 moreShow less
Newest
-
ca ehealth performance manager
** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...
CVE-2021-28250
7.8 High
-
ca ehealth performance manager
** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...
CVE-2021-28249
8.8 High
-
ca ehealth performance manager
** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...
CVE-2021-28247
5.4 Medium
-
ca risk authentication, strong authentication +1 more
A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong...
CVE-2019-7393
4.3 Medium
-
ca risk authentication, strong authentication +1 more
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA...
CVE-2019-7394
8.8 High
-
broadcom service desk manager
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to...
CVE-2018-19635
9.8 Critical
-
broadcom service desk manager
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to...
CVE-2018-19634
7.5 High
-
ca technologies ppm, broadcom project portfolio management +1 more
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15...
CVE-2018-13826
9.1 Critical
-
ca technologies ppm, broadcom project portfolio management +1 more
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14...
CVE-2018-13825
6.1 Medium
-
ca technologies ppm, broadcom project portfolio management +1 more
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5...
CVE-2018-13824
9.8 Critical
-
ca technologies ppm, broadcom project portfolio management +1 more
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15...
CVE-2018-13823
7.5 High
-
broadcom unified infrastructure management
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...
CVE-2018-13821
9.8 Critical
-
broadcom unified infrastructure management
A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...
CVE-2018-13820
7.5 High
-
broadcom unified infrastructure management
A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...
CVE-2018-13819
7.5 High
-
ca privileged access manager
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote...
CVE-2018-9027
6.1 Medium
-
ca spectrum
CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote...
CVE-2018-6589
7.5 High
-
ca workload control center
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via...
CVE-2018-8954
9.8 Critical
-
ca workload automation ae
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection...
CVE-2018-8953
8.8 High
-
ca api developer portal
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting...
CVE-2018-6588
6.1 Medium
-
ca api developer portal
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting...
CVE-2018-6587
6.1 Medium
-
ca api developer portal
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting...
CVE-2018-6586
6.1 Medium
-
ca identity governance
A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote...
CVE-2017-9394
5.4 Medium
-
ca identity manager, identity manager virtual appliance +1 more
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially...
CVE-2017-9393
9.8 Critical
-
ca client automation
The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1...
CVE-2017-8391
5.5 Medium
-
ca unified infrastructure management, unified infrastructure management snap +1 more
The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor)...
CVE-2016-9165
7.5 High
-
ca unified infrastructure management
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management ...
CVE-2016-9164
7.5 High
-
ca service desk manager
Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12...
CVE-2016-9148
6.1 Medium
-
broadcom ca workload automation ae, client automation, systemedge +3 more +5 more
The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0;...
CVE-2016-9795
Public exploit
7.8 High
-
ca service desk management, service desk manager +1 more
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might...
CVE-2016-10086
8.1 High
-
broadcom ehealth
CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of...
CVE-2016-6152
8.8 High
-
ca ehealth
CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly...
CVE-2016-6151
8.8 High
-
ca client automation, network and systems management, nsm job management option +3 more +5 more
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...
CVE-2015-3318
4.6 Medium
-
ca client automation, network and systems management, nsm job management option +3 more +5 more
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...
CVE-2015-3317
4.6 Medium
-
broadcom network and systems management, ca client automation, nsm job management option +3 more +5 more
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...
CVE-2015-3316
4.6 Medium
-
ca cloud service management
CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary...
CVE-2014-8474
7.5 High
-
ca cloud service management
Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before...
CVE-2014-8473
6.8 Medium
-
ca cloud service management
CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication...
CVE-2014-8472
6.8 Medium
-
ca cloud service management
CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay...
CVE-2014-8471
4.3 Medium
-
ca erwin web portal
Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to...
CVE-2014-2210
7.5 High
-
broadcom siteminder, ca web agents +1 more
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6...
CVE-2013-5968
4.3 Medium
-
ca identityminder
Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6...
CVE-2012-6299
10.0 High
-
ca identityminder
Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6...
CVE-2012-6298
10.0 High
-
ca xcom data transport
CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute...
CVE-2012-5973
10.0 High
-
ca internet security suite 2010
** DISPUTED ** Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP...
CVE-2010-5156
Disputed
6.2 Medium
-
antiy avl sdk, ca etrust vet antivirus, emsisoft anti-malware +10 more +12 more
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti...
CVE-2012-1453
EPSS 97.7%
4.3 Medium
-
aladdin esafe, antiy avl sdk, ca etrust vet antivirus +9 more +11 more
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5...
CVE-2012-1446
EPSS 99.7%
4.3 Medium
-
aladdin esafe, ca etrust vet antivirus, fortinet antivirus +2 more +4 more
The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1...
CVE-2012-1440
EPSS 77.7%
4.3 Medium
-
ca siteminder
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12...
CVE-2011-4054
4.3 Medium
-
ca arcserve d2d
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows...
CVE-2011-3011
Public exploit
EPSS 71.6%
5.0 Medium
-
broadcom total defense, ca gateway security +1 more
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69...
CVE-2011-2667
EPSS 16.2%
10.0 High
- Show olderLoading…