Akana
5 CVEs across 1 Akana products. Browse Akana vulnerabilities, severities, and proof-of-concept exploits.
Akana products with known CVEs
Akana CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-5250 | Low | 3.5 | 2024-07-30 | In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations |
CVE-2024-5249 | Medium | 5.4 | 2024-07-30 | In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed. |
CVE-2024-3930 | Medium | 6.3 | 2024-07-30 | In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered. |
CVE-2024-3826 | | | 2024-07-02 | In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality. |
CVE-2024-2796 | Critical | 9.3 | 2024-04-18 | A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.3. Reported by Jakob Antonsson. |