Privileged Access Manager

privileged_access_manager

Vendor: Broadcom • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-7392 1Broadcom 1Privileged Access Manager Jun 17, 2026 Feb 26, 2019 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration.
CVE-2018-9029 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
CVE-2018-9028 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
CVE-2018-9026 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
CVE-2018-9025 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.
CVE-2018-9024 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
CVE-2018-9023 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
CVE-2018-9022 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.
CVE-2018-9021 1Broadcom 1Privileged Access Manager Jun 17, 2026 Jun 18, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.
CVE-2015-4664 2Broadcom Xceedium 2Privileged Access Manager Xsuite Nov 21, 2024 Jun 18, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.