LDAPAccountManager lam vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 20242
3. 20251
4. 20263

Newest CVEs

• CVE-2026-55167

  LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session

  LDAPAccountManager · lam

  Medium4.2
• CVE-2026-27895

  LAM has incorrect regular expression in PDF export component that allows user to upload files of any type

  LDAPAccountManager · lam

  Medium4.3
• CVE-2026-27894

  LAM has Authenticated Local File Inclusion (LFI) in PDF export

  LDAPAccountManager · lam

  High8.8
• CVE-2025-58174

  LAM profile editor stored cross-site scripting vulnerability

  LDAPAccountManager · lam

  Medium4.6
• CVE-2024-52792

  Arbitrary config values override in lam

  LDAPAccountManager · lam

  Medium6.5
• CVE-2024-23333

  LAM vulnerable to Authenticated Remote Code Execution

  LDAPAccountManager · lam

  High7.9
• CVE-2022-31085

  Missing Encryption of Sensitive Data in ldap-account-manager

  LDAPAccountManager · lam

  Medium5.5
• CVE-2022-31084

  Unauthenticated Remote Code Execution in ldap-account-manager

  LDAPAccountManager · lam

  Critical9.0
• CVE-2022-31086

  Incorrect Regular Expressions in ldap-account-manager

  LDAPAccountManager · lam

  Medium6.6
• CVE-2022-31087

  Incorrect Default Permissions in ldap-account-manager

  LDAPAccountManager · lam

  High7.8