CVEDB API

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.1%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2019-13497

Oneidentity » Cloud Access Manager » Version: N/A

cpe:2.3:a:oneidentity:cloud_access_manager:-
Oneidentity » Cloud Access Manager » Version: 7.0

cpe:2.3:a:oneidentity:cloud_access_manager:7.0
Oneidentity » Cloud Access Manager » Version: 7.0.1

cpe:2.3:a:oneidentity:cloud_access_manager:7.0.1
Oneidentity » Cloud Access Manager » Version: 7.0.2

cpe:2.3:a:oneidentity:cloud_access_manager:7.0.2
Oneidentity » Cloud Access Manager » Version: 7.1

cpe:2.3:a:oneidentity:cloud_access_manager:7.1
Oneidentity » Cloud Access Manager » Version: 8.0

cpe:2.3:a:oneidentity:cloud_access_manager:8.0
Oneidentity » Cloud Access Manager » Version: 8.0.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.0.1
Oneidentity » Cloud Access Manager » Version: 8.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.1
Oneidentity » Cloud Access Manager » Version: 8.1.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.1
Oneidentity » Cloud Access Manager » Version: 8.1.2

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.2
Oneidentity » Cloud Access Manager » Version: 8.1.3

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.3
Oneidentity » Cloud Access Manager » Version: 8.1.4

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.4