Priority MEDIUM 55
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00483 · Published 2023-01-01 · No fix listed CWE-79
Priority MEDIUM 45
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01268 · Published 2020-04-07 · No fix listed CWE-502
Priority MEDIUM 43
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00518 · Published 2022-09-14 · No fix listed CWE-295
Priority LOW 38
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00452 · Published 2020-04-07 · No fix listed CWE-352
Priority LOW 33
An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00491 · Published 2020-09-11 · No fix listed CWE-295
Priority LOW 32
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00581 · Published 2020-04-07 · No fix listed CWE-522
Priority LOW 31
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0105 · Published 2020-04-07 · No fix listed
Priority LOW 27
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00393 · Published 2020-04-07 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00858 · Published 2020-04-07 · No fix listed CWE-863
Priority LOW 24
An issue was discovered in PrimeKey EJBCA before 7.6.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.0036 · Published 2021-08-25 · No fix listed CWE-862
Priority LOW 23
The vulnerability exists in the EJBCA service, version 8.0 Enterprise.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0022 · Published 2025-03-31 · No fix listed CWE-601
Priority LOW 23
The vulnerability exists in the EJBCA service, version 8.0 Enterprise.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00233 · Published 2025-03-31 · No fix listed CWE-74
Priority LOW 23
An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00653 · Published 2022-03-21 · No fix listed CWE-79
Priority LOW 20
An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00365 · Published 2020-11-19 · No fix listed CWE-295
Priority LOW 14
An issue was discovered in PrimeKey EJBCA before 7.6.0.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00412 · Published 2021-08-25 · No fix listed CWE-312
Priority LOW 12
An issue was discovered in PrimeKey EJBCA before 7.6.0.
CVSS 3.1LOW 2.2· Network · High privileges · No interaction · EPSS 0.00542 · Published 2021-08-25 · No fix listed CWE-200
Priority LOW 11
An issue was discovered in PrimeKey EJBCA before 7.6.0.
CVSS 3.1LOW 2.3· Local · High privileges · No interaction · EPSS 0.00223 · Published 2021-08-25 · No fix listed