Oneidentity vulnerabilities

Products

• Syslog-ng 7
• Password Manager 4
• Cloud Access Manager 3

Newest

• oneidentity syslog-ng, debian linux +1 more tranport: TLS host name wildcard matching too lax CVE-2024-47619 Fix available 7.5 HighMay 7, 2025
• oneidentity identity manager In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR)... CVE-2024-56404 9.9 CriticalJanuary 24, 2025
• oneidentity safeguard for privileged sessions An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged... CVE-2024-40595 5.3 MediumOctober 24, 2024
• oneidentity password manager One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to... CVE-2023-51772 8.8 HighDecember 25, 2023
• oneidentity password manager One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to... CVE-2023-48654 9.8 CriticalDecember 25, 2023
• one, oneidentity password manager +1 more One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation CVE-2023-4003 7.6 HighSeptember 27, 2023
• oneidentity syslog-ng, syslog-ng store box +1 more CVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-7 CVE-2022-38725 Public exploitFix available 7.5 HighJanuary 23, 2023
• oneidentity password manager An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid... CVE-2020-7962 5.3 MediumNovember 13, 2020
• oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 more syslog-ng: Local privilege escalation from new to root in %post CVE-2020-8019 Fix available 7.7 HighMay 7, 2020
• oneidentity cloud access manager One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. CVE-2019-13497 Public exploit 6.5 MediumNovember 4, 2019
• oneidentity cloud access manager One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a... CVE-2019-13496 Public exploit 8.1 HighNovember 4, 2019
• oneidentity cloud access manager One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which... CVE-2019-13498 Public exploit 7.4 HighJuly 29, 2019
• oneidentity syslog-ng lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using... CVE-2011-1951 Fix available 4.3 MediumJuly 11, 2011
• oneidentity syslog-ng Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not... CVE-2011-0343 Fix available 6.9 MediumJanuary 28, 2011
• oneidentity syslog-ng syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the... CVE-2008-5110 Fix available 9.3 HighNovember 17, 2008
• oneidentity syslog-ng Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or... CVE-2002-1200 Fix available 7.5 HighOctober 15, 2002