Skip to content

Ca Technologies vulnerabilities

Products

Newest

broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged... CVE-2020-11660 6.5 MediumApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged... CVE-2020-11659 4.3 MediumApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which... CVE-2020-11658 9.8 CriticalApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which... CVE-2020-11663 6.1 MediumApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote... CVE-2020-11662 7.5 HighApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged... CVE-2020-11661 8.1 HighApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious... CVE-2020-11666 8.8 HighApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure... CVE-2020-11665 6.1 MediumApril 15, 2020
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure... CVE-2020-11664 6.1 MediumApril 15, 2020
ca technologies client automation, workload automation ae, broadcom ca client automation +1 more +3 more An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and... CVE-2019-13656 9.8 CriticalSeptember 6, 2019
broadcom service desk manager CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to... CVE-2018-19635 9.8 CriticalJanuary 22, 2019
broadcom service desk manager CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to... CVE-2018-19634 7.5 HighJanuary 22, 2019
broadcom ca identity suite virtual appliance, ca technologies identity governance, broadcom ca identity governance +2 more CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual... CVE-2018-14597 5.3 MediumOctober 17, 2018
broadcom release automation Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5... CVE-2018-15691 Public exploit EPSS 16.6% 9.8 CriticalAugust 30, 2018
ca technologies ppm, broadcom project portfolio management +1 more An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15... CVE-2018-13826 9.1 CriticalAugust 30, 2018
ca technologies ppm, broadcom project portfolio management +1 more Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14... CVE-2018-13825 6.1 MediumAugust 30, 2018
ca technologies ppm, broadcom project portfolio management +1 more Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5... CVE-2018-13824 9.8 CriticalAugust 30, 2018
ca technologies ppm, broadcom project portfolio management +1 more An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15... CVE-2018-13823 7.5 HighAugust 30, 2018
ca technologies ppm, broadcom project portfolio management +1 more Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and... CVE-2018-13822 7.5 HighAugust 30, 2018
broadcom unified infrastructure management A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows... CVE-2018-13821 9.8 CriticalAugust 30, 2018
broadcom unified infrastructure management A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows... CVE-2018-13820 7.5 HighAugust 30, 2018
broadcom unified infrastructure management A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows... CVE-2018-13819 7.5 HighAugust 30, 2018
broadcom ca api developer portal, ca technologies api developer portal +1 more CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross... CVE-2018-6590 6.1 MediumAugust 3, 2018
broadcom privileged access manager An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote... CVE-2018-9029 9.8 CriticalJune 18, 2018
broadcom privileged access manager Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity... CVE-2018-9028 7.5 HighJune 18, 2018
ca privileged access manager A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote... CVE-2018-9027 6.1 MediumJune 18, 2018
broadcom privileged access manager A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to... CVE-2018-9026 7.5 HighJune 18, 2018
broadcom privileged access manager An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to... CVE-2018-9025 7.5 HighJune 18, 2018
broadcom privileged access manager An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to... CVE-2018-9024 5.3 MediumJune 18, 2018
broadcom privileged access manager An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users... CVE-2018-9023 8.8 HighJune 18, 2018
broadcom privileged access manager An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows... CVE-2018-9022 Public exploit EPSS 12.6% 9.8 CriticalJune 18, 2018
broadcom privileged access manager An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows... CVE-2018-9021 Public exploit 9.8 CriticalJune 18, 2018
broadcom privileged access manager, xceedium xsuite +1 more An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier... CVE-2015-4664 Public exploit EPSS 20.2% 9.8 CriticalJune 18, 2018
ca spectrum CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote... CVE-2018-6589 7.5 HighMay 1, 2018
ca workload control center CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via... CVE-2018-8954 9.8 CriticalApril 11, 2018
ca workload automation ae CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection... CVE-2018-8953 8.8 HighApril 11, 2018
ca api developer portal CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting... CVE-2018-6588 6.1 MediumMarch 29, 2018
ca api developer portal CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting... CVE-2018-6587 6.1 MediumMarch 29, 2018
ca api developer portal CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting... CVE-2018-6586 6.1 MediumMarch 29, 2018
ca identity governance A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote... CVE-2017-9394 5.4 MediumNovember 14, 2017
ca identity manager, identity manager virtual appliance +1 more CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially... CVE-2017-9393 9.8 CriticalSeptember 22, 2017