Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Perforce Component: Akana Api Clear all filters
TI-2024-03668 CVE-2024-3930 · GHSA-3wqv-582c-6cpc

XML External Entity in Akana

Priority MEDIUM 42

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00312 Published 2024-07-30 Fixed in 2024.1.0, 2022.1.3.2 CWE-611
TI-2024-04874 CVE-2024-5250 · GHSA-mjjp-275q-ww9c

Overly Verbose Errors in SAML Integration

Priority LOW 24

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2024-07-30 Fixed in 2024.1.0 CWE-209
TI-2024-04873 CVE-2024-5249 · GHSA-93xv-w432-6pgp

SAML Replay in Akana

Priority LOW 32

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00219 Published 2024-07-30 Fixed in 2024.1.0, 2022.1.3.2 CWE-294