CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-9023

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.6%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2018-9023

Broadcom » Privileged Access Manager » Version: 2.0.0

cpe:2.3:a:broadcom:privileged_access_manager:2.0.0
Broadcom » Privileged Access Manager » Version: 2.4.4.4

cpe:2.3:a:broadcom:privileged_access_manager:2.4.4.4
Broadcom » Privileged Access Manager » Version: 2.7.0

cpe:2.3:a:broadcom:privileged_access_manager:2.7.0
Broadcom » Privileged Access Manager » Version: 2.8.0

cpe:2.3:a:broadcom:privileged_access_manager:2.8.0
Broadcom » Privileged Access Manager » Version: 2.8.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.1
Broadcom » Privileged Access Manager » Version: 2.8.2

cpe:2.3:a:broadcom:privileged_access_manager:2.8.2
Broadcom » Privileged Access Manager » Version: 2.8.3

cpe:2.3:a:broadcom:privileged_access_manager:2.8.3
Broadcom » Privileged Access Manager » Version: 2.8.4.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-9023

Products

Pricing

Contact Us