Project Portfolio Management Security Vulnerabilities and Issues — Project Portfolio Management CVE List

Lucene search

BroadcomProject Portfolio Management

5 matches found

CVE•added 2018/08/30 2:29 p.m.•40 views

CVE-2018-13826

An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.

9.1CVSS9.1AI score0.00539EPSS

CVE•added 2018/08/30 2:29 p.m.•31 views

CVE-2018-13824

Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.

9.8CVSS9.8AI score0.00706EPSS

CVE•added 2018/08/30 2:29 p.m.•31 views

CVE-2018-13825

Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.

6.1CVSS6.1AI score0.00239EPSS

CVE•added 2018/08/30 2:29 p.m.•29 views

CVE-2018-13822

Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.

7.5CVSS7.4AI score0.00262EPSS

CVE•added 2018/08/30 2:29 p.m.•27 views

CVE-2018-13823

An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.

7.5CVSS7.5AI score0.00586EPSS