Skip to content
Keyfactor vulnerabilities
Newest
-
keyfactor signserver
An error in the SignServer container startup logic was found in Keyfactor SignServer versions...
CVE-2025-26787
4.7 Medium
-
keyfactor signserver
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 3 of 3.
CVE-2025-47222
6.5 Medium
-
keyfactor signserver
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 2 of 3.
CVE-2025-47221
5.3 Medium
-
keyfactor signserver
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 1 of 3.
CVE-2025-47220
5.3 Medium
-
keyfactor rg-ew5100be
Keyfactor RG-EW5100BE HTTP POST Request cmd command injection
CVE-2025-11073
5.1 Medium
-
keyfactor ejbca
The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not...
CVE-2024-36066
3.1 Low
-
keyfactor aws orchestrator
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
CVE-2024-42006
7.5 High
-
keyfactor command
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could...
CVE-2024-34458
7.5 High
-
keyfactor command
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could...
CVE-2024-33872
9.8 Critical
-
keyfactor ejbca
In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert...
CVE-2023-34196
8.2 High
-
keyfactor kefactor ejbca
Keyfactor EJBCA before 7.10.0 allows XSS.
CVE-2022-42954
5.4 Medium
-
keyfactor primekey ejbca
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA...
CVE-2022-39834
5.4 Medium