CVEDB API

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-9029

Broadcom » Privileged Access Manager » Version: 2.0.0

cpe:2.3:a:broadcom:privileged_access_manager:2.0.0
Broadcom » Privileged Access Manager » Version: 2.4.4.4

cpe:2.3:a:broadcom:privileged_access_manager:2.4.4.4
Broadcom » Privileged Access Manager » Version: 2.7.0

cpe:2.3:a:broadcom:privileged_access_manager:2.7.0
Broadcom » Privileged Access Manager » Version: 2.8.0

cpe:2.3:a:broadcom:privileged_access_manager:2.8.0
Broadcom » Privileged Access Manager » Version: 2.8.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.1
Broadcom » Privileged Access Manager » Version: 2.8.2

cpe:2.3:a:broadcom:privileged_access_manager:2.8.2
Broadcom » Privileged Access Manager » Version: 2.8.3

cpe:2.3:a:broadcom:privileged_access_manager:2.8.3
Broadcom » Privileged Access Manager » Version: 2.8.4.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.4.1