Ca Unified Infrastructure Management — known CVE vulnerabilities

Every CVE whose affected-product data names Ca Unified Infrastructure Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-13821 — CVSS 9.8 (critical): A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of…
• CVE-2016-9164 — CVSS 7.5 (high): Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and…
• CVE-2016-9165 — CVSS 7.5 (high): The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure…
• CVE-2018-13819 — CVSS 7.5 (high): A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2018-13820 — CVSS 7.5 (high): A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.