Lucene search

K

Keyfactor Security Vulnerabilities

cve
cve

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates (attributes and public keys) to unauthenticated or less privileged users may....

8.2CVSS

8AI Score

0.001EPSS

2023-08-03 03:15 AM
21
cve
cve

CVE-2022-42954

Keyfactor EJBCA before 7.10.0 allows...

5.4CVSS

5.5AI Score

0.001EPSS

2022-11-17 05:15 AM
30
9
cve
cve

CVE-2022-39834

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege...

5.4CVSS

5.1AI Score

0.001EPSS

2022-11-17 05:15 AM
28
6