CVEDB API

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-9025

Broadcom » Privileged Access Manager » Version: 2.0.0

cpe:2.3:a:broadcom:privileged_access_manager:2.0.0
Broadcom » Privileged Access Manager » Version: 2.4.4.4

cpe:2.3:a:broadcom:privileged_access_manager:2.4.4.4
Broadcom » Privileged Access Manager » Version: 2.7.0

cpe:2.3:a:broadcom:privileged_access_manager:2.7.0
Broadcom » Privileged Access Manager » Version: 2.8.0

cpe:2.3:a:broadcom:privileged_access_manager:2.8.0
Broadcom » Privileged Access Manager » Version: 2.8.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.1
Broadcom » Privileged Access Manager » Version: 2.8.2

cpe:2.3:a:broadcom:privileged_access_manager:2.8.2
Broadcom » Privileged Access Manager » Version: 2.8.3

cpe:2.3:a:broadcom:privileged_access_manager:2.8.3
Broadcom » Privileged Access Manager » Version: 2.8.4.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.4.1