Keyfactor kayıtları
keyfactor üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-642 External Control of Critical State Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-33872İstismar yok | Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of CWE-89 | Kritik9,8 | — | %0,5 | 20 Ağu 2024 |
32İzleyin | CVE-2023-34196İstismar yok | In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an akeyfactor · ejbca · CWE-287 | Yüksek8,2 | — | %0,4 | 2 Ağu 2023 |
30İzleyin | CVE-2024-42006İstismar yok | Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.keyfactor · aws orchestrator · CWE-200 | Yüksek7,5 | — | %0,4 | 20 Ağu 2024 |
30İzleyin | CVE-2024-34458İstismar yok | Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.keyfactor · command · CWE-89 | Yüksek7,5 | — | %0,4 | 20 Ağu 2024 |
26İzleyin | CVE-2025-47222İstismar yok | A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2.keyfactor · signserver · CWE-284 | Orta6,5 | — | %0,3 | 13 Kas 2025 |
21İzleyin | CVE-2022-39834İstismar yok | A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2.keyfactor · primekey ejbca · CWE-79 | Orta5,4 | — | %0,4 | 17 Kas 2022 |
21İzleyin | CVE-2022-42954İstismar yok | Keyfactor EJBCA before 7.10.0 allows XSS.keyfactor · kefactor ejbca · CWE-79 | Orta5,4 | — | %0,4 | 17 Kas 2022 |
21İzleyin | CVE-2025-47220İstismar yok | A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which keyfactor · signserver · CWE-284 | Orta5,3 | — | %0,3 | 13 Kas 2025 |
21İzleyin | CVE-2025-47221İstismar yok | An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2.keyfactor · signserver · CWE-284 | Orta5,3 | — | %0,2 | 13 Kas 2025 |
18İzleyin | CVE-2025-26787İstismar yok | An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.keyfactor · signserver · CWE-642 | Orta4,7 | — | %0,1 | 22 Ara 2025 |
12İzleyin | CVE-2024-36066İstismar yok | The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFkeyfactor · ejbca | Düşük3,1 | — | %0,2 | 12 Eyl 2024 |
- CVE-2024-3387239İzleyin
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of
KritikCVSS 9,8İstismar yokEPSS %020 Ağu 2024
- CVE-2023-3419632İzleyin
In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an a
YüksekCVSS 8,2İstismar yokEPSS %0keyfactor · ejbca2 Ağu 2023
- CVE-2024-4200630İzleyin
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
YüksekCVSS 7,5İstismar yokEPSS %0keyfactor · aws orchestrator20 Ağu 2024
- CVE-2024-3445830İzleyin
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.
YüksekCVSS 7,5İstismar yokEPSS %0keyfactor · command20 Ağu 2024
- CVE-2025-4722226İzleyin
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2.
OrtaCVSS 6,5İstismar yokEPSS %0keyfactor · signserver13 Kas 2025
- CVE-2022-3983421İzleyin
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2.
OrtaCVSS 5,4İstismar yokEPSS %0keyfactor · primekey ejbca17 Kas 2022
- CVE-2022-4295421İzleyin
Keyfactor EJBCA before 7.10.0 allows XSS.
OrtaCVSS 5,4İstismar yokEPSS %0keyfactor · kefactor ejbca17 Kas 2022
- CVE-2025-4722021İzleyin
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which
OrtaCVSS 5,3İstismar yokEPSS %0keyfactor · signserver13 Kas 2025
- CVE-2025-4722121İzleyin
An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2.
OrtaCVSS 5,3İstismar yokEPSS %0keyfactor · signserver13 Kas 2025
- CVE-2025-2678718İzleyin
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.
OrtaCVSS 4,7İstismar yokEPSS %0keyfactor · signserver22 Ara 2025
- CVE-2024-3606612İzleyin
The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RF
DüşükCVSS 3,1İstismar yokEPSS %0keyfactor · ejbca12 Eyl 2024