Keyfactor

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Keyfactor records in CISA KEV

No Keyfactor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Signserver 4 records LOW Ejbca 2 records MEDIUM Aws Orchestrator 1 record LOW Command 1 record LOW Kefactor Ejbca 1 record LOW Primekey Ejbca 1 record LOW

Records

2 records in Ejbca · all components

TI-2023-17038 CVE-2023-34196 · GHSA-hxcm-7rgp-cmh6

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet…

MEDIUM 42

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00421 Published 2023-08-03 No fix listed CWE-287

TI-2024-23918 CVE-2024-36066 · GHSA-xmrg-69jq-mfv5

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus…

LOW 14

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00168 Published 2024-09-12 No fix listed

Open these records in search →

Critical	0
High	3
Medium	7
Low	1
No CVSS	0