Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/03/28 4:59 p.m.5 views

CVE-2025-13478

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS6AI score0.00286EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/27 3:30 p.m.3 views

EUVD-2025-209094

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS6AI score0.00286EPSS
Exploits0References3
NVD
NVD
added 2026/03/27 2:16 p.m.5 views

CVE-2025-13478

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS0.00286EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 1:43 p.m.2 views

CVE-2025-13478

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS6AI score0.00286EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/27 1:43 p.m.4 views

CVE-2025-13478 Cache Misconfiguration Leading to Cross-User Data Exposure

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS6AI score0.00286EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/27 1:43 p.m.24 views

CVE-2025-13478 Cache Misconfiguration Leading to Cross-User Data Exposure

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS0.00286EPSS
Exploits0References2
CVE
CVE
added 2026/03/27 1:43 p.m.9 views

CVE-2025-13478

CVE-2025-13478 affects OpenText Identity Manager on Windows and Linux (Identity Manager: 25.2 v4.10.1). The issue is a cache misconfiguration where insecure application cache handling allows remote authenticated users to obtain another user’s session data. Impact per available docs: potential exp...

8.4CVSS6AI score0.00286EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.4 views

PT-2026-28272

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2v4.10.1...

8.4CVSS6AI score0.00286EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.4 views

F5 BIG-IP和F5 BIG-IP Next CNF 安全漏洞

F5 BIG-IP and F5 BIG-IP Next CNF are both products of F5 Corporation, U.S.A. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and more.F5 BIG-IP Next CNF is a cloud-native network function solution. A securi...

8.7CVSS6.4AI score0.00317EPSS
Exploits0References2
Hacker One
Hacker One
added 2025/03/27 8:49 a.m.8 views

Hiro: Logout Bypass Vulnerability in Hiro.so

Summary A logout bypass vulnerability has been identified on platform.hiro.so, allowing users to regain access to their session after logging out simply by pressing the back button on the browser. This issue arises due to improper session invalidation and potential caching misconfigurations. If...

6.5AI score
Exploits0
CNNVD
CNNVD
added 2023/06/21 12:0 a.m.2 views

ISC BIND 安全漏洞

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND 9 that stems from improperly restricted cache configuration, which can be exploited by an attacker to cause a denial of service condition...

7.5CVSS7.2AI score0.03776EPSS
Exploits0References25
CNNVD
CNNVD
added 2021/08/13 12:0 a.m.30 views

Hashicorp HashiCorp Vault 信息泄露漏洞

HashiCorp HashiCorp Vault is a private key access management tool from HashiCorp Hashicorp, USA. An information disclosure vulnerability exists in HashiCorp Vault, which stems from a misconfiguration of the product's cache that causes the browser to incorrectly cache sensitive information about a...

5.3CVSS5.6AI score0.00911EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/04/06 12:0 a.m.5 views

PT-2021-15651 · Facebook · Whatsapp Business For Android +1

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.4.18 WhatsApp Business for Android versions prior to 2.21.4.18 Description: A cache configuration issue may have allowed a third party with access to the device’s external storage to read cached TLS...

7.5CVSS7.4AI score0.03805EPSS
Exploits1References18
0day.today
0day.today
added 2012/12/24 12:0 a.m.37 views

WordPress Plugin - W3 Total Cache Remote Sql Injection Exploit

Exploit for php platform in category web applications From the developers' description 1, W3 Total Cache is: The most complete WordPress performance framework. Recommended by web hosts like: MediaTemple, Host Gator, Page.ly and WP Engine and countless more. Trusted by countless sites like:...

7.1AI score
Exploits0
Rows per page
Query Builder