CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

134 matches found

NVD•added 2026/06/12 2:16 a.m.•7 views

CVE-2026-45170

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

8.8CVSS0.00086EPSS

Exploits0References1

CVE•added 2026/06/12 12:5 a.m.•11 views

CVE-2026-45170

CVE-2026-45170 concerns Idira Privilege Cloud Connector, where versions prior to 1.1.100504 may not enforce TLS certificate validation under certain conditions/configurations. This could enable a potential security bypass affecting confidentiality, integrity, and availability, as indicated by the...

8.8CVSS5.8AI score0.00086EPSS

Exploits0References1Affected Software1

Vulnrichment•added 2026/06/12 12:5 a.m.•9 views

CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

7.5CVSS5.8AI score0.00086EPSS

Exploits0References1

Cvelist•added 2026/06/12 12:5 a.m.•28 views

CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

7.5CVSS0.00086EPSS

Exploits0References1

Positive Technologies•added 2026/06/12 12:0 a.m.•8 views

PT-2026-48816

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

7.5CVSS5.4AI score0.00086EPSS

Exploits0References2

RedhatCVE•added 2026/01/09 9:20 a.m.•12 views

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

7.7CVSS6.8AI score0.00522EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:20 a.m.•16 views

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

5.9CVSS6.3AI score0.0045EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:20 a.m.•8 views

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

7.5CVSS7AI score0.01132EPSS

Exploits0References1