Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2020-11665

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11664

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11663

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11662

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11661

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.

CVSS 3.1 · 8.1 High EPSS 1.9% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11660

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11659

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2020-11658

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal
CVE-2018-6590

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom
Products
Ca Api Developer Portal