Ldap-account-manager Ldap Account Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Ldap-account-manager Ldap Account Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2022-31086 — CVSS 8.8 (high): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In…
• CVE-2026-27894 — CVSS 8.8 (high): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to…
• CVE-2018-8764 — CVSS 8.8 (high): Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it…
• CVE-2022-24851 — CVSS 8.1 (high): LDAP Account Manager (LAM) is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an…
• CVE-2022-31084 — CVSS 8.1 (high): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In…
• CVE-2024-23333 — CVSS 7.9 (high): LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify…
• CVE-2022-31087 — CVSS 7.8 (high): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In…
• CVE-2012-1114 — CVSS 6.1 (medium): A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and…
• CVE-2012-1115 — CVSS 6.1 (medium): A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to…
• CVE-2018-8763 — CVSS 6.1 (medium): Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php…
• CVE-2022-31085 — CVSS 6.1 (medium): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In…
• CVE-2022-31088 — CVSS 5.3 (medium): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In…
• CVE-2013-4453 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to…
• CVE-2026-27895 — CVSS 4.3 (medium): LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to…