Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

oneidentity / cloud_access_manager CVEs

Beta · best-effort

3 CVEs tagged to oneidentity / cloud_access_manager — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to oneidentity vendor archive

CVE-2019-13496

Published Nov 4, 2019

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2019-13498

Published Jul 29, 2019

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.

CVSS 7.4 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1