CVE-2021-28248

CA eHealth Performance Manager up to version 6.3.2.12 suffers from Improper Restriction of Excessive Authentication Attempts via the /web/frames/ endpoint, allowing an attacker to attempt many passwords and potentially access a targeted account. The maintainer no longer supports this product, and...

CVE-2021-28246

CVE-2021-28246 affects CA eHealth Performance Manager up to version 6.3.2.12. The issue is a privilege-escalation defect where a regular user can place a malicious library in the writable RPATH, which is dynamically linked when the emtgtctl2 executable runs, causing the library code to execute wi...

CVE-2016-6152

CA eHealth vulnerability CVE-2016-6152 affects CA eHealth 6.2.x and 6.3.x prior to 6.3.2.13, enabling remote authenticated users to cause a denial of service or potentially execute arbitrary commands via unspecified vectors. The CNVD entry clarifies the affected versions and the fault, and the NV...