VYPR
← Ca

Vendor CVEs

Ca

All CVEs

280 total · sorted by risk
  • CVE-2018-6589HigMay 1, 2018
    Ca
    Spectrum
    risk 0.49cvss 7.5epss 0.02

    CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.

  • CVE-2016-9165HigMar 20, 2017
    Ca
    Unified Infrastructure Management
    risk 0.49cvss 7.5epss 0.04

    The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids and consequently bypass authentication…

  • CVE-2016-9164HigMar 7, 2017
    Ca
    Unified Infrastructure Management
    risk 0.49cvss 7.5epss 0.05

    Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via…

  • CVE-2015-8698HigJun 29, 2016
    Ca
    Release Automation
    risk 0.46cvss 7.1epss 0.01

    CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external…

  • CVE-2021-44050MedDec 2, 2021
    Ca
    Network Flow Analysis
    risk 0.42cvss 6.5epss 0.01

    CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.

  • CVE-2020-11660MedApr 15, 2020
    Ca
    CA API Developer Portal
    risk 0.42cvss 6.5epss 0.01

    CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.

  • CVE-2016-3118MedApr 6, 2016
    Ca
    API Gateway
    risk 0.42cvss 6.5epss 0.02

    CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.

  • CVE-2020-11665MedApr 15, 2020
    Ca
    CA API Developer Portal
    risk 0.40cvss 6.1epss 0.02

    CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

  • CVE-2020-11664MedApr 15, 2020
    Ca
    CA API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

  • CVE-2020-11663MedApr 15, 2020
    Ca
    CA API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.

  • CVE-2019-6504MedFeb 6, 2019
    Ca
    Automic Workload Automation
    risk 0.40cvss 6.1epss 0.03

    Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

  • CVE-2018-13825MedAug 30, 2018
    Ca
    PPM
    risk 0.40cvss 6.1epss 0.01

    Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.

  • CVE-2018-6590MedAug 3, 2018
    Ca
    CA API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.

  • CVE-2018-9027MedJun 18, 2018
    Ca
    Ca Privileged Access Manager
    risk 0.40cvss 6.1epss 0.01

    A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link.

  • CVE-2018-6588MedMar 29, 2018
    Ca
    API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.

  • CVE-2018-6587MedMar 29, 2018
    Ca
    API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.

  • CVE-2018-6586MedMar 29, 2018
    Ca
    API Developer Portal
    risk 0.40cvss 6.1epss 0.01

    CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.

  • CVE-2016-9148MedMar 7, 2017
    Ca
    Service Desk Manager
    risk 0.40cvss 6.1epss 0.02

    Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REF_NUM parameter.

  • CVE-2015-8699MedJun 29, 2016
    Ca
    Release Automation
    risk 0.40cvss 6.1epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via…

  • CVE-2017-8391MedMay 6, 2017
    Ca
    Client Automation
    risk 0.36cvss 5.5epss 0.00

    The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after…

  • CVE-2022-33755MedJun 16, 2022
    CA Automic
    Automic agent
    risk 0.35cvss 5.3epss 0.01

    CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users.

  • CVE-2005-10001MedMar 28, 2022
    Ca
    Siteminder
    risk 0.35cvss 5.4epss 0.01

    A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been…

  • CVE-2021-28247MedMar 26, 2021
    Ca
    Ehealth Performance Manager
    risk 0.35cvss 5.4epss 0.01

    CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting…

  • CVE-2017-9394MedNov 14, 2017
    Ca
    Identity Governance
    risk 0.35cvss 5.4epss 0.01

    A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user.

  • CVE-2018-7673MedMar 26, 2018
    Ca
    Identity Manager
    risk 0.33cvss 5.1epss 0.01

    The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.

  • CVE-2020-11659MedApr 15, 2020
    Ca
    CA API Developer Portal
    risk 0.28cvss 4.3epss 0.01

    CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.

  • CVE-2019-7393MedMay 28, 2019
    Ca
    Risk Authentication
    risk 0.28cvss 4.3epss 0.02

    A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.

  • CVE-2018-7676LowMar 28, 2018
    Microfocus
    Identity Manager
    risk 0.25cvss 3.9epss 0.01

    The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.

  • CVE-2011-1653Apr 18, 2011
    Ca
    Total Defense
    risk 0.10cvss —epss 0.89

    Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,…

  • CVE-2010-0219Oct 18, 2010
    Apache
    Axis2
    risk 0.10cvss —epss 0.91

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web…

  • CVE-2011-3011Aug 15, 2011
    Ca
    Arcserve D2d
    risk 0.09cvss —epss 0.72

    BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.

  • CVE-2008-4397Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.81

    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

  • CVE-2007-2139Apr 25, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.78

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection…

  • CVE-2007-0449Jan 23, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.09cvss —epss 0.79

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute…

  • CVE-2007-0169Jan 11, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.70

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2)…

  • CVE-2006-6076Nov 24, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.71

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

  • CVE-2006-5143Oct 10, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.80

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute…

  • CVE-2005-2668Aug 23, 2005
    Ca
    Message Queuing
    risk 0.09cvss —epss 0.75

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2005-2535Aug 10, 2005
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.09cvss —epss 0.81

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

  • CVE-2005-0260May 2, 2005
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.

  • CVE-2012-1453Mar 21, 2012
    Trend Micro
    Housecall
    risk 0.08cvss —epss 0.98

    The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus…

  • CVE-2012-1446Mar 21, 2012
    Cat
    Quick Heal
    risk 0.08cvss —epss 1.00

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher)…

  • CVE-2007-5003Oct 1, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.08cvss —epss 0.67

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3)…

  • CVE-2007-5082Oct 1, 2007
    Ca
    BrightStor Hierarchical Storage Manager
    risk 0.08cvss —epss 0.63

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length…

  • CVE-2007-3216Jun 14, 2007
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.08cvss —epss 0.59

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4)…

  • CVE-2005-1272Aug 5, 2005
    Ca
    Brightstor ARCserve Backup
    risk 0.08cvss —epss 0.66

    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

  • CVE-2004-0932Jan 27, 2005
    McAfee
    Antivirus Engine
    risk 0.08cvss —epss 0.66

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…

  • CVE-2009-0043Jan 8, 2009
    Ca
    Service Level Management
    risk 0.07cvss —epss 0.53

    The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.

  • CVE-2007-4620Apr 7, 2008
    Ca
    Threat Manager For The Enterprise
    risk 0.07cvss —epss 0.52

    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and…

  • CVE-2007-2864Jun 6, 2007
    Ca
    Anti-Virus Engine
    risk 0.07cvss —epss 0.50

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Page 2 of 6