Openca

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Openca records in CISA KEV

No Openca vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openca 3 records LOW Openca Pki 1 record LOW

Records

3 records in Openca · all components

TI-2004-00004 CVE-2004-0004 · GHSA-7459-9rcq-g3xj

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only…

LOW 37

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0209 Published 2004-09-01 No fix listed

TI-2003-00867 CVE-2003-0960 · GHSA-g666-8cmc-c2x7

OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the…

LOW 34

OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00727 Published 2003-12-02 No fix listed

TI-2004-00725 CVE-2004-0787 · GHSA-w497-j7hh-3v5h

Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and…

LOW 22

Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2004-09-24 No fix listed

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0