← Back

Vasco

vasco

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Identikey Authentication Server
identikey_authentication_server
1 CVE
Digipass
digipass
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-7349
1Vasco
1Digipass
May 13, 2026
Sep 28, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessag...Show more
Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter.Show less
CVE-2013-7292
1Vasco
1Identikey Authentication Server
Apr 29, 2026
Jan 13, 2014
N/A· v4
N/A· v3
3.5 LOW· v2
VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) authentication by entering only a DIGIPASS one-time password, instead of the intended combination of thi...Show more
VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password.Show less