Lucene search
+L

28 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-45052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests ...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 a.m.•20 views

CVE-2026-45052

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS0.00765EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/15 9:43 a.m.•44 views

CVE-2026-45052 OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS0.00765EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 9:43 a.m.•14 views

CVE-2026-45052 OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/15 9:43 a.m.•92 views

CVE-2026-45052

OpenAM (Open Access Management) Community Edition versions through 16.0.6 are affected by an Improper Authorization (CWE-285) in the Liberty Web Services SOAP receiver . An unauthenticated remote attacker can write persistent entries into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/15 9:43 a.m.•25 views

EUVD-2026-78352

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•10 views

CVE-2026-45052: Improper Authorization

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:13 a.m.•23 views

CVE-2022-42307

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity XXE Injection attack through the DiscoveryService service...

9.8CVSS7.2AI score0.00611EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-45374

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00728EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-45382

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00611EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-45380

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00668EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:54 p.m.•15 views

CVE-2022-42299

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

7.5CVSS6.8AI score0.00728EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:44 p.m.•17 views

CVE-2022-42305

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service...

7.5CVSS6.9AI score0.00668EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/10/11 12:00 a.m.•32 views

Veritas NetBackup DiscoveryService Service XML External Entity Injection Vulnerability

Veritas NetBackup is a storage service used by Veritas, Inc. to provide backup and recovery capabilities for enterprise environments. Veritas NetBackup 10.0.0.1 and previous versions are vulnerable to XML external entity injection, which stems from the fact that the DiscoveryService service does...

9.8CVSS3.6AI score0.00611EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/03 3:15 p.m.•18 views

CVE-2022-42307

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity XXE Injection attack through the DiscoveryService service...

9.8CVSS5.8AI score0.00611EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/03 3:15 p.m.•25 views

CVE-2022-42305

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service...

7.5CVSS0.00668EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/03 3:15 p.m.•6 views

CVE-2022-42299

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

7.5CVSS5.8AI score0.00728EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/03 3:15 p.m.•27 views

CVE-2022-42299

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

7.5CVSS0.00728EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/03 3:15 p.m.•30 views

Path traversal

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service...

5CVSS7.5AI score0.00668EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/03 2:49 p.m.•31 views

CVE-2022-42299

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

5.3CVSS7.6AI score0.00728EPSS
SaveExploits0References1
Rows per page
Query Builder