Enterprise Application Access
by Akamai
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-18847 | Cri | 0.64 | 9.8 | 0.02 | Aug 26, 2020 | Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1. | ||
| CVE-2025-24527 | Hig | 0.52 | 8.0 | 0.00 | Jan 29, 2025 | An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector. | ||
| CVE-2021-40683 | Hig | 0.51 | 7.8 | 0.00 | Oct 4, 2021 | In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution. |
- risk 0.64cvss 9.8epss 0.02
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.
- risk 0.52cvss 8.0epss 0.00
An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector.
- risk 0.51cvss 7.8epss 0.00
In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.