One Identity

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

One Identity records in CISA KEV

No One Identity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Syslog-ng 7 records HIGH Password Manager 4 records HIGH Cloud Access Manager 3 records LOW Syslog-ng Store Box 1 record MEDIUM

Records

4 records in Password Manager · all components

TI-2023-28400 CVE-2023-51772 · GHSA-vjxw-62pr-vrfg

One Identity Password Manager before 5.13.1 allows Kiosk Escape.

HIGH 73

One Identity Password Manager before 5.13.1 allows Kiosk Escape.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00515 Published 2023-12-25 No fix listed CWE-613

TI-2023-26501 CVE-2023-48654 · GHSA-wfg4-v93p-7mj4

One Identity Password Manager before 5.13.1 allows Kiosk Escape.

MEDIUM 44

One Identity Password Manager before 5.13.1 allows Kiosk Escape.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01013 Published 2023-12-25 No fix listed

TI-2023-03717 CVE-2023-4003 · GHSA-j27c-p2q4-c74c

One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation

LOW 36

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method.

CVSS 3.1HIGH 7.6 Physical No auth No interaction EPSS 0.00543 Published 2023-09-27 No fix listed CWE-250

TI-2020-06441 CVE-2020-7962 · GHSA-mx3q-x87f-8pxm

An issue was discovered in One Identity Password Manager 5.8.

LOW 26

An issue was discovered in One Identity Password Manager 5.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00871 Published 2020-11-13 No fix listed CWE-203

Open these records in search →

Critical	5
High	10
Medium	6
Low	0
No CVSS	0