CA Technologies
32 CVEs across 12 CA Technologies products. Browse CA Technologies vulnerabilities, severities, and proof-of-concept exploits.
CA Technologies products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13656 | Critical | 9.8 | 2019-09-06 | An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to… |
CVE-2018-19635 | Critical | 9.8 | 2019-01-22 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. |
CVE-2018-19634 | High | 7.5 | 2019-01-22 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. |
CVE-2018-14597 | Medium | 5.3 | 2018-10-17 | CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that… |
CVE-2018-15691 | Critical | 9.8 | 2018-08-30 | Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary… |
CVE-2018-13826 | Critical | 9.1 | 2018-08-30 | An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote… |
CVE-2018-13825 | Medium | 6.1 | 2018-08-30 | Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows re… |
CVE-2018-13824 | Critical | 9.8 | 2018-08-30 | Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to… |
CVE-2018-13823 | High | 7.5 | 2018-08-30 | An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote… |
CVE-2018-13822 | High | 7.5 | 2018-08-30 | Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive infor… |
CVE-2018-13821 | Critical | 9.8 | 2018-08-30 | A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including fil… |
CVE-2018-13820 | High | 7.5 | 2018-08-30 | A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. |
CVE-2018-13819 | High | 7.5 | 2018-08-30 | A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. |
CVE-2018-6590 | Medium | 6.1 | 2018-08-03 | CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability. |
CVE-2018-9029 | Critical | 9.8 | 2018-06-18 | An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. |
CVE-2018-9028 | High | 7.5 | 2018-06-18 | Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. |
CVE-2018-9027 | Medium | 6.1 | 2018-06-18 | A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted… |
CVE-2018-9026 | High | 7.5 | 2018-06-18 | A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request. |
CVE-2018-9025 | High | 7.5 | 2018-06-18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input. |
CVE-2018-9024 | Medium | 5.3 | 2018-06-18 | An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. |
CVE-2018-9023 | High | 8.8 | 2018-06-18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted argu… |
CVE-2018-9022 | Critical | 9.8 | 2018-06-18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poiso… |
CVE-2018-9021 | Critical | 9.8 | 2018-06-18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially c… |
CVE-2015-4664 | Critical | 9.8 | 2018-06-18 | An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands. |
CVE-2018-6589 | High | 7.5 | 2018-05-01 | CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2018-8954 | Critical | 9.8 | 2018-04-11 | CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request. |
CVE-2018-8953 | High | 8.8 | 2018-04-11 | CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request. |
CVE-2018-6588 | Medium | 6.1 | 2018-03-29 | CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer. |
CVE-2018-6587 | Medium | 6.1 | 2018-03-29 | CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable. |
CVE-2018-6586 | Medium | 6.1 | 2018-03-29 | CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing. |
CVE-2017-9394 | Medium | 5.4 | 2017-11-14 | A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the conte… |
CVE-2017-9393 | Critical | 9.8 | 2017-09-22 | CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive searc… |