One Identity

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

One Identity records in CISA KEV

No One Identity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Syslog-ng 7 records HIGH Password Manager 4 records HIGH Cloud Access Manager 3 records LOW Syslog-ng Store Box 1 record MEDIUM

Records

1 record in Syslog-ng Store Box · all components

TI-2022-18249 CVE-2022-38725

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37…

MEDIUM 44

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02472 Published 2023-01-23 No fix listed CWE-190

Open these records in search →

Critical	5
High	10
Medium	6
Low	0
No CVSS	0