Vendor
CA Technologies
32 known vulnerabilities.
CA Technologies at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
Latest advisories
-
High
CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B)
first Aug 14, 2016
32 results · Feed
-
Critical 9.8
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11…
-
Unscored —
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in …
-
Unscored —
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey informati…
-
Unscored —
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and …
-
Unscored —
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below…
-
Unscored —
A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensi…
-
Unscored —
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below…
-
Unscored —
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to con…
-
Unscored —
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP…
-
Unscored —
A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensi…
-
Unscored —
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and …
-
Unscored —
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, al…
-
Unscored —
Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows att…
-
Unscored —
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerab…
-
Unscored —
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers …
-
Unscored —CVE-2018-9021 Public exploit
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Unscored —
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL i…
-
Unscored —
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with …
-
Unscored —
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Unscored —
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary co…
-
Unscored —
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute m…
-
Unscored —
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions wi…
-
Unscored —
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in …
-
Unscored —
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
-
Unscored —
CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of…
-
Unscored —
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP requ…
-
Unscored —
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP reques…
-
Unscored —
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to t…
-
Unscored —
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to prof…
-
Unscored —
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to t…
-
Unscored —
A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to dis…
-
Unscored —
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of loc…