Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2020-13422

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Openiam
Products
Openiam
CVE-2020-13421

OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Openiam
Products
Openiam
CVE-2020-13420

OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Openiam
Products
Openiam
CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Openiam
Products
Openiam
CVE-2020-13418

OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Openiam
Products
Openiam