Yubico Yubikey One Time Password Validation Server — known CVE vulnerabilities

Every CVE whose affected-product data names Yubico Yubikey One Time Password Validation Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-10185 — CVSS 8.6 (high): The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially…
• CVE-2020-10184 — CVSS 7.5 (high): The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to…