6 matches found
com.identityx.auth:daon-http-digest-auth (>=4.4.0.10, <=5.0.0.2), com.identityx:identityxclientsdk (>=4.4.0.10, <=5.0.0.2) +21 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (5.14)
com.nimbusds:nimbus-jose-jwt MAVEN version 5.14 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.identityx.auth:daon-http-digest-auth =4.4.0.10, =4.4.0.10, =2.1.0, =2.3.0, =2.2.0, =2.2.0, =2.1.0,...
CVE-2022-37953
An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST v07.09.15 and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantl...
CVE-2022-37953 WorkstationST - Response Splitting in AM Gateway Challenge-Response
An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST v07.09.15 and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantl...
CVE-2022-37953
CVE-2022-37953 affects General Electric WorkstationST prior to 07.09.15, with an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog. The root cause is improper handling of CRLF sequences in HTTP headers, which could allow an attacker to compromise a victim’s browser...
CVE-2022-37953: Improper Neutralization of CRLF Sequences in HTTP Headers
An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST...
