Vendors / One Identity Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 10
Exploited now One Identity records in CISA KEV No One Identity vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response…
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00856 · Published 2019-11-04 · No fix listed CWE-354
Priority LOW 35
One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks.
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.01217 · Published 2019-07-29 · No fix listed CWE-319
Priority LOW 30
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00732 · Published 2019-11-04 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
5 10 6 0 0
