Lemonldap-ng Lemonldap:: — known CVE vulnerabilities

Every CVE whose affected-product data names Lemonldap-ng Lemonldap::, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-13031 — CVSS 8.1 (high): LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default…
• CVE-2012-6426 — CVSS 7.5 (high): LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass…