Oneidentity Cloud Access Manager vulnerabilities

• oneidentity cloud access manager One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. CVE-2019-13497 Public exploit 6.5 MediumNovember 4, 2019
• oneidentity cloud access manager One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a... CVE-2019-13496 Public exploit 8.1 HighNovember 4, 2019
• oneidentity cloud access manager One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which... CVE-2019-13498 Public exploit 7.4 HighJuly 29, 2019