CVE-2025-12026 WatchGuard Firebox Authenticated Out of Bounds Write in certd

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands...

CVE-2025-12026

WatchGuard Fireware OS contains an Out-of-bounds Write vulnerability in the certificate request command that can allow an authenticated privileged user to execute arbitrary code via crafted CLI commands. Affected versions include Fireware OS 12.0–12.11.4, 12.5–12.5.13, and 2025.1–2025.1.2. Mitiga...

HPESBMU04585 rev.1 - HPE IceWall Gen11 certd module for Windows, Local Denial Of Service (DOS)

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 for Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-4807 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |...

HPESBMU04488 rev.3 - HPE IceWall products, Remote Code Execution, Remote Denial of Service

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-23375 |...

CVE-2022-28623

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

Hewlett Packard Enterprise IceWall SSO SQL注入漏洞

Hewlett Packard Enterprise IceWall SSO is a single sign-on program from Hewlett Packard Enterprise USA that provides authentication capabilities for users. A security vulnerability exists in Hewlett Packard Enterprise IceWall SSO certd version 10.0, which originated from a vulnerability that can ...

CVE-2022-28623: Improper Neutralization of Special Elements used in an SQL Command

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

HPESBMU04330 rev.1 - HPE IceWall Products Using SSO Certd, Multiple Vulnerabilities

Potential Security Impact: Remote: SQL Injection, Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 10.0 RHEL and HP-UX CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-28623 |...

HPESBMU04275 rev.1 - HPE IceWall Products Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL 7, 8 and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-0778 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H ...

HPESBMU04179 rev.1 - HPE IceWall Products Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL 8 and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3449 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5...