Ca api developer portal

This hub aggregates every CVE we track for Ca api developer portal, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Ca api developer portal.

• CVE-2020-11660CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.6.5Apr 15, 2020
• CVE-2020-11659CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.4.3Apr 15, 2020
• CVE-2020-11658CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.9.8Apr 15, 2020
• CVE-2020-11663CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.6.1Apr 15, 2020
• CVE-2020-11662CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.7.5Apr 15, 2020
• CVE-2020-11661CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.8.1Apr 15, 2020
• CVE-2020-11666CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.8.8Apr 15, 2020
• CVE-2020-11665CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.6.1Apr 15, 2020
• CVE-2020-11664CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.6.1Apr 15, 2020
• CVE-2018-6590CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.6.1Aug 3, 2018
• CVE-2018-6587CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable.6.1Mar 29, 2018
• CVE-2018-6588CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer.6.1Mar 29, 2018
• CVE-2018-6586CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing.6.1Mar 29, 2018