Browse CVEs

HIGH 8.8 CVE-2019-13657 CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker … Ca Performance Management 3.6.9 / 3.7.4+ Fix from $1,9502019-10-17 CRITICAL 9.8 CVE-2019-13658 CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and co… Network Flow Analysis after 9.5.0 Fix from $2,3002019-10-02 CRITICAL 9.8 CVE-2019-13656EPSS 6% An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote a… Ca Client Automation No fix yet Fix from $2,3002019-09-06 MEDIUM 6.5 CVE-2018-18371 The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An i… Advanced Secure Gateway 6.5.10.15 / 6.7.4.2+ Fix from $1,6002019-08-30 MEDIUM 6.1 CVE-2018-18370 The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A st… Advanced Secure Gateway 6.5.10.15 / 6.7.4.2+ Fix from $1,6002019-08-30 HIGH 8.8 CVE-2018-19860 Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not pro… Bcm4335c0 Firmware Mitigation only Fix from $1,9502019-06-07 CRITICAL 9.1 CVE-2019-7392 An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensiti… Privileged Access Manager after 3.2.1 Fix from $2,3002019-02-26 MEDIUM 6.1 CVE-2019-6504 Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially c… Automic Workload Automation after 12.2 Fix from $1,6002019-02-06 CRITICAL 9.8 CVE-2018-19635 CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. Service Desk Manager Patch available Fix from $2,3002019-01-22 HIGH 7.5 CVE-2018-19634 CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. Service Desk Manager Patch available Fix from $1,9502019-01-22 HIGH 7.8 CVE-2018-20552 Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. Tcpreplay 4.3.1+ Fix from $1,9502018-12-28 HIGH 7.8 CVE-2018-20553 Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. Tcpreplay 4.3.1+ Fix from $1,9502018-12-28 CRITICAL 9.1 CVE-2018-6440 A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers … Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $2,3002018-12-03 HIGH 7.8 CVE-2018-6439 A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could a… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-12-03 HIGH 7.8 CVE-2018-6437 A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a loc… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 7.8 CVE-2018-6438 A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allo… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 7.8 CVE-2018-6436 A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 8.8 CVE-2018-6442 A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenti… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 7.8 CVE-2018-6435 A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allo… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 7.8 CVE-2018-6441 A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to pro… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 HIGH 7.5 CVE-2018-6434 A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept… Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,9502018-11-08 MEDIUM 5.5 CVE-2018-6433 A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to … Fabric Operating System 7.4.2d / 8.0.2f+ Fix from $1,6002018-11-08 MEDIUM 5.3 CVE-2018-14597 CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error mes… Ca Identity Governance after 14.2 Fix from $1,6002018-10-17 MEDIUM 5.5 CVE-2018-17974 An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins… Tcpreplay No fix yet Fix from $1,6002018-10-03 HIGH 7.1 CVE-2018-17582 Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function u… Tcpreplay Patch available Fix from $1,9502018-09-28 HIGH 7.1 CVE-2018-17580 A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial… Tcpreplay Patch available Fix from $1,9502018-09-28 CRITICAL 9.8 CVE-2018-13824 Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote att… Project Portfolio Management after 14.3 Fix from $2,3002018-08-30 CRITICAL 9.8 CVE-2018-15691EPSS 17% Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute … Release Automation 6.3.0.9945 / 6.4.0.10119+ Fix from $2,3002018-08-30 CRITICAL 9.1 CVE-2018-13826 An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allo… Project Portfolio Management after 14.3 Fix from $2,3002018-08-30 HIGH 7.5 CVE-2018-13823 An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allo… Project Portfolio Management after 14.3 Fix from $1,9502018-08-30