Vulnerabilities > Primekey > Ejbca > 6.15.2.6

DATE CVE VULNERABILITY TITLE RISK
2022-09-14 CVE-2022-34831 Improper Certificate Validation vulnerability in Primekey Ejbca
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization.
network
low complexity
primekey CWE-295
critical
 9.8
9.8
2021-08-25 CVE-2021-40086 Information Exposure vulnerability in Primekey Ejbca
An issue was discovered in PrimeKey EJBCA before 7.6.0.
network
high complexity
primekey CWE-200
2.2
2.2
2021-08-25 CVE-2021-40087 Cleartext Storage of Sensitive Information vulnerability in Primekey Ejbca
An issue was discovered in PrimeKey EJBCA before 7.6.0.
network
low complexity
primekey CWE-312
2.7
2.7
2021-08-25 CVE-2021-40088 Missing Authorization vulnerability in Primekey Ejbca
An issue was discovered in PrimeKey EJBCA before 7.6.0.
network
low complexity
primekey CWE-862
5.4
5.4
2021-08-25 CVE-2021-40089 Unspecified vulnerability in Primekey Ejbca
An issue was discovered in PrimeKey EJBCA before 7.6.0.
local
low complexity
primekey
2.3
2.3
2020-11-19 CVE-2020-28942 Improper Certificate Validation vulnerability in Primekey Ejbca
An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol.
network
low complexity
primekey CWE-295
4.3
4.3