FR
Product
Freeipa
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 7Low 0
Watch
Add Freeipa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73196 | 6.5 | Aug 20 | Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding Affected: before 4.13.3 |
| CVE-2023-5455 | 6.5 | Jan 10 | Ipa: invalid csrf protection Affected: before 4.6.10; 4.7.0 before 4.9.14; 4.10.0 before 4.10.3; 4.11.0; 4.11.0 |
| CVE-2019-10195 | 6.5 | Nov 27 | A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API… Affected: 4.6.0 before 4.6.7; 4.7.0 before 4.7.4; 4.8.0 before 4.8.3 |
| CVE-2016-5404 | 6.5 | Sep 7 | The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging… Affected: All versions, or not specified |
| CVE-2016-9575 | 6.3 | Mar 13 | Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command Affected: 4.2.0; 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.2.4; +6 more |
| CVE-2020-1722 | 5.3 | Apr 27 | A flaw was found in all ipa versions 4.x.x through 4.8.0 Affected: 4.0.0 through 4.8.0 |
| CVE-2019-14826 | 4.4 | Sep 17 | A flaw was found in FreeIPA versions 4.5.0 and later Affected: 4.5.0 and later |
Showing 7