Vulnerabilities > Akamai

DATE CVE VULNERABILITY TITLE RISK
2021-10-04 CVE-2021-40683 Unquoted Search Path or Element vulnerability in Akamai Enterprise Application Access 2.0.1/2.4.0
In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.
local
akamai CWE-428
4.4
2020-08-26 CVE-2019-18847 Improper Certificate Validation vulnerability in Akamai Enterprise Application Access
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.
network
low complexity
akamai CWE-295
7.5
2019-06-21 CVE-2019-11011 Deserialization of Untrusted Data vulnerability in Akamai Cloudtest
Akamai CloudTest before 58.30 allows remote code execution.
network
low complexity
akamai CWE-502
7.5
2017-01-23 CVE-2016-10157 Code Injection vulnerability in Akamai Netsession 1.9.3.1
Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path.
network
low complexity
akamai CWE-94
7.5
2008-06-04 CVE-2008-1770 Code Injection vulnerability in Akamai Download Manager 2.0.4.4/2.2.0.0/2.2.1.0
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.
network
akamai CWE-94
critical
9.3