Ca Api Developer Portal Security Vulnerabilities and Issues — Ca Api Developer Portal CVE List

Lucene search

BroadcomCa Api Developer Portal

10 matches found

CVE•added 2020/04/15 9:15 p.m.•48 views

CVE-2020-11658

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.

9.8CVSS9.3AI score0.00243EPSS

CVE•added 2020/04/15 8:15 p.m.•48 views

CVE-2020-11661

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.

8.1CVSS7.8AI score0.0034EPSS

CVE•added 2020/04/15 9:15 p.m.•46 views

CVE-2020-11660

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.

6.5CVSS6.3AI score0.00363EPSS

CVE•added 2020/04/15 8:15 p.m.•46 views

CVE-2020-11663

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.

6.1CVSS6.2AI score0.00259EPSS

CVE•added 2020/04/15 8:15 p.m.•44 views

CVE-2020-11666

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.

8.8CVSS8.6AI score0.0043EPSS

CVE•added 2020/04/15 9:15 p.m.•43 views

CVE-2020-11659

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.

4.3CVSS4.5AI score0.00198EPSS

CVE•added 2020/04/15 8:15 p.m.•43 views

CVE-2020-11664

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

6.1CVSS6.2AI score0.00259EPSS

CVE•added 2020/04/15 8:15 p.m.•42 views

CVE-2020-11662

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.

7.5CVSS7.5AI score0.00754EPSS

CVE•added 2020/04/15 8:15 p.m.•39 views

CVE-2020-11665

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

6.1CVSS6.2AI score0.00259EPSS

CVE•added 2018/08/03 2:29 p.m.•35 views

CVE-2018-6590

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.

6.1CVSS6AI score0.00265EPSS