Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-32408

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.

CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed
Vendors
Soffid
Products
Iam
CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Soffid
Products
Iam
CVE-2017-9363

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

CVSS 3.0 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Soffid
Products
Iam