Dogtagpki vulnerabilities

Products

• Dogtagpki 14
• Network Security Services For Java 2

Newest

• dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 more Memory leak on tls connections CVE-2022-4132 Fix available 5.9 MediumOctober 4, 2023
• dogtagpki Access to external entities when parsing XML documents can lead to XML external entity (XXE)... CVE-2022-2414 Public exploitFix available EPSS 85.4% 7.5 HighJuly 29, 2022
• dogtag jss, debian linux, dogtagpki network security services for java +1 more +3 more A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted... CVE-2021-4213 Fix available 7.5 HighMay 10, 2022
• dogtagpki, fedoraproject fedora, oracle linux +9 more +11 more A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores... CVE-2021-3551 Fix available 7.8 HighJune 3, 2021
• [unknown] pki-core, dogtagpki, fedoraproject fedora +2 more +4 more A flaw was found in pki-core. An attacker who has successfully compromised a key could use this... CVE-2021-20179 Fix available 8.1 HighMarch 15, 2021
• [unknown] pki-core, dogtagpki +1 more A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... CVE-2020-25715 Fix available 6.1 MediumNovember 3, 2020
• [unknown] pki-core, dogtagpki +1 more A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... CVE-2020-1721 Fix available 6.1 MediumNovember 3, 2020
• dogtagpki In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... CVE-2020-15720 Fix available 6.8 MediumJuly 14, 2020
• [unknown] pki-core, dogtagpki, redhat certificate system +2 more A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS... CVE-2019-10180 2.4 LowMarch 31, 2020
• [unknown] pki-core, dogtagpki, redhat certificate system +2 more A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where... CVE-2020-1696 4.6 MediumMarch 20, 2020
• [unknown] pki-core/pki-kra, dogtagpki, redhat enterprise linux +2 more A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... CVE-2019-10179 Fix available 4.3 MediumMarch 20, 2020
• [unknown] pki-core, dogtagpki, redhat enterprise linux +2 more A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... CVE-2019-10221 Fix available 4.3 MediumMarch 20, 2020
• [unknown] pki-core, dogtagpki +1 more It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from... CVE-2019-10178 4.6 MediumMarch 18, 2020
• [unknown] pki-core, dogtagpki, redhat enterprise linux +2 more A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... CVE-2019-10146 Fix available 4.7 MediumMarch 18, 2020
• [unknown] pki-core, dogtagpki, redhat enterprise linux desktop +2 more +4 more It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally... CVE-2017-7537 Fix available 5.9 MediumJuly 26, 2018
• [unknown] pki-core, dogtagpki +1 more Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain... CVE-2018-1080 Fix available 7.5 HighJuly 2, 2018