# cve.now: CA Technologies

The newest entries naming CA Technologies as an affected vendor (up to 200), of 32 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2019-13656](https://cve.now/CVE-2019-13656.md): An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a (CVSS 9.8)
- [CVE-2018-19635](https://cve.now/CVE-2018-19635.md): CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. (no CVSS)
- [CVE-2018-19634](https://cve.now/CVE-2018-19634.md): CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. (no CVSS)
- [CVE-2018-14597](https://cve.now/CVE-2018-14597.md): CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling (no CVSS)
- [CVE-2018-15691](https://cve.now/CVE-2018-15691.md): Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially (no CVSS)
- [CVE-2018-13826](https://cve.now/CVE-2018-13826.md): An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and be (no CVSS)
- [CVE-2018-13825](https://cve.now/CVE-2018-13825.md): Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 a (no CVSS)
- [CVE-2018-13824](https://cve.now/CVE-2018-13824.md): Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows r (no CVSS)
- [CVE-2018-13823](https://cve.now/CVE-2018-13823.md): An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and be (no CVSS)
- [CVE-2018-13822](https://cve.now/CVE-2018-13822.md): Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to acc (no CVSS)
- [CVE-2018-13821](https://cve.now/CVE-2018-13821.md): A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of att (no CVSS)
- [CVE-2018-13820](https://cve.now/CVE-2018-13820.md): A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. (no CVSS)
- [CVE-2018-13819](https://cve.now/CVE-2018-13819.md): A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information. (no CVSS)
- [CVE-2018-6590](https://cve.now/CVE-2018-6590.md): CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability. (no CVSS)
- [CVE-2018-9029](https://cve.now/CVE-2018-9029.md): An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. (no CVSS)
- [CVE-2018-9028](https://cve.now/CVE-2018-9028.md): Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. (no CVSS)
- [CVE-2018-9027](https://cve.now/CVE-2018-9027.md): A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with (no CVSS)
- [CVE-2018-9026](https://cve.now/CVE-2018-9026.md): A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte (no CVSS)
- [CVE-2018-9025](https://cve.now/CVE-2018-9025.md): An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp (no CVSS)
- [CVE-2018-9024](https://cve.now/CVE-2018-9024.md): An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. (no CVSS)
- [CVE-2018-9023](https://cve.now/CVE-2018-9023.md): An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing spe (no CVSS)
- [CVE-2018-9022](https://cve.now/CVE-2018-9022.md): An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code o (no CVSS)
- [CVE-2018-9021](https://cve.now/CVE-2018-9021.md): An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary comman (no CVSS)
- [CVE-2015-4664](https://cve.now/CVE-2015-4664.md): An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2018-6589](https://cve.now/CVE-2018-6589.md): CA Spectrum 10.1 prior to 10.01.02.PTF\_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecif (no CVSS)
- [CVE-2018-8954](https://cve.now/CVE-2018-8954.md): CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request. (no CVSS)
- [CVE-2018-8953](https://cve.now/CVE-2018-8953.md): CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request. (no CVSS)
- [CVE-2018-6588](https://cve.now/CVE-2018-6588.md): CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer. (no CVSS)
- [CVE-2018-6587](https://cve.now/CVE-2018-6587.md): CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable. (no CVSS)
- [CVE-2018-6586](https://cve.now/CVE-2018-6586.md): CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processin (no CVSS)
- [CVE-2017-9394](https://cve.now/CVE-2017-9394.md): A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute (no CVSS)
- [CVE-2017-9393](https://cve.now/CVE-2017-9393.md): CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ca-technologies
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.