Akamai

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-66373 1Akamai 1Akamaighost Dec 16, 2025 Dec 4, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling. When Akamai Ghost receives an invalid chunked body that includes a chunk si...Show more Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling. When Akamai Ghost receives an invalid chunked body that includes a chunk size different from the actual size of the following chunk data, under certain circumstances, Akamai Ghost erroneously forwards the invalid request and subsequent superfluous bytes to the origin server. An attacker could hide a smuggled request in these superfluous bytes. Whether this is exploitable depends on the origin server's behavior and how it processes the invalid request it receives from Akamai Ghost.Show less
CVE-2024-45164 1Akamai 1Secure Internet Access Enterprise Threatavert Nov 6, 2024 Nov 4, 2024 N/A· v4 7.1 HIGH· v3 N/A· v2 Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization co...Show more Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticated user can navigate directly to the /#app/intelligence/threatAvertPolicies URI and disable policy enforcement.Show less
CVE-2021-40683 1Akamai 1Enterprise Application Access Nov 21, 2024 Oct 4, 2021 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.
CVE-2019-18847 1Akamai 1Enterprise Application Access Nov 21, 2024 Aug 26, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.
CVE-2019-11011 1Akamai 1Cloudtest Nov 21, 2024 Jun 21, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Akamai CloudTest before 58.30 allows remote code execution.
CVE-2016-10157 1Akamai 1Netsession May 13, 2026 Jan 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making...Show more Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.Show less
CVE-2008-1770 1Akamai 1Download Manager Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed...Show more CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.Show less