CA Technologies vulnerabilities
32 published CVEs name CA Technologies among the affected products.
- Published CVEs
- 32
- Last 12 months
- 0
- Critical
- 12
- Known exploited
- 0
Critical 12High 11Medium 9Low 0Not scored 0
CVEs per yearBy the year they were published
- 20172
- 201827
- 20193
Newest CVEs
- CVE-2019-13656
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to…
CA Technologies · Client Automation
Critical9.8 - CVE-2018-19635
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.
CA Technologies · CA Service Desk Manager
Critical9.8 - CVE-2018-19634
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.
CA Technologies · CA Service Desk Manager
High7.5 - CVE-2018-14597
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that…
CA Technologies · CA Identity Governance
Medium5.3 - CVE-2018-15691
Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary…
CA Technologies · Release Automation
Critical9.8 - CVE-2018-13826
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote…
CA Technologies · PPM
Critical9.1 - CVE-2018-13825
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows…
CA Technologies · PPM
Medium6.1 - CVE-2018-13824
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to…
CA Technologies · PPM
Critical9.8 - CVE-2018-13823
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote…
CA Technologies · PPM
High7.5 - CVE-2018-13822
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive…
CA Technologies · PPM
High7.5
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)7
- CWE-20 Improper input validation5
- CWE-269 Improper privilege management3
- CWE-89 SQL injection3
- CWE-200 Exposure of sensitive information2
- CWE-284 Improper access control2
- CWE-287 Improper authentication2
- CWE-611 XML external entity (XXE)2
- CWE-798 Hard-coded credentials2
- CWE-203 1