Skip to content
Noroxi

OneIdentity records

15 published records for vendor oneidentity.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
53.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2023-48654
    39Monitor

    One Identity Password Manager before 5.13.1 allows Kiosk Escape.

    CriticalCVSS 9.8No exploitEPSS 1%

    oneidentity · password managerDec 25, 2023

  • CVE-2008-5110
    38Monitor

    syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail.

    CriticalCVSS 9.3No exploitEPSS 2%

    oneidentity · syslog-ngNov 17, 2008

  • CVE-2023-51772
    35Monitor

    One Identity Password Manager before 5.13.1 allows Kiosk Escape.

    HighCVSS 8.8No exploitEPSS 0%

    oneidentity · password managerDec 25, 2023

  • CVE-2002-1200
    32Monitor

    Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of

    HighCVSS 7.5No exploitEPSS 5%

    oneidentity · syslog-ngOct 28, 2002

  • CVE-2019-13496
    32Monitor

    One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defend

    HighCVSS 8.1Proof of conceptEPSS 0%

    oneidentity · cloud access managerNov 4, 2019

  • CVE-2022-38725
    31Monitor

    An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service vi

    HighCVSS 7.5Proof of conceptEPSS 2%

    oneidentity · syslog-ngJan 23, 2023

  • CVE-2020-8019
    31Monitor

    syslog-ng: Local privilege escalation from new to root in %post

    HighCVSS 7.8No exploitEPSS 0%

    suse · linux enterprise debuginfoJun 29, 2020

  • CVE-2024-47619
    30Monitor

    tranport: TLS host name wildcard matching too lax

    HighCVSS 7.5No exploitEPSS 0%

    oneidentity · syslog-ngMay 7, 2025

  • CVE-2019-13498
    29Monitor

    One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks

    HighCVSS 7.4Proof of conceptEPSS 1%

    oneidentity · cloud access managerJul 29, 2019

  • CVE-2023-4003
    27Monitor

    One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation

    MediumCVSS 6.8No exploitEPSS 0%

    oneidentity · password managerSep 27, 2023

  • CVE-2011-0343
    27Monitor

    Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes s

    MediumCVSS 6.9No exploitEPSS 0%

    freebsd · freebsdJan 28, 2011

  • CVE-2019-13497
    26Monitor

    One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    oneidentity · cloud access managerNov 4, 2019

  • CVE-2020-7962
    21Monitor

    An issue was discovered in One Identity Password Manager 5.8.

    MediumCVSS 5.3No exploitEPSS 0%

    oneidentity · password managerNov 13, 2020

  • CVE-2024-40595
    21Monitor

    An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS

    MediumCVSS 5.3No exploitEPSS 0%

    Oct 24, 2024

  • CVE-2011-1951
    18Monitor

    lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows

    MediumCVSS 4.3No exploitEPSS 2%

    pcre · pcreJul 11, 2011