Advisories · Technology
LDAPAccountManager lam.
Every CVE that names LDAPAccountManager lam among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.2 Medium
LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session
- LDAPAccountManager lam
- Authentication bypass
- CVSS 4.3 Medium
LAM has incorrect regular expression in PDF export component that allows user to upload files of any type
- LDAPAccountManager lam
- CWE-185
- CVSS 8.8 High
LAM has Authenticated Local File Inclusion (LFI) in PDF export
- LDAPAccountManager lam
- File inclusion
- CVSS 4.6 Medium
LAM profile editor stored cross-site scripting vulnerability
- LDAPAccountManager lam
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Arbitrary config values override in lam
- LDAPAccountManager lam
- CWE-610
- CVSS 7.9 HighCritical · CVSS 7+ and EPSS
LAM vulnerable to Authenticated Remote Code Execution
- LDAPAccountManager lam
- Other injection
- CVSS 5.5 Medium
Missing Encryption of Sensitive Data in ldap-account-manager
- LDAPAccountManager lam
- Weak cryptography or TLS
- CVSS 9.0 CriticalCritical · CVSS 9+
Unauthenticated Remote Code Execution in ldap-account-manager
- LDAPAccountManager lam
- Command injection
- CVSS 6.6 Medium
Incorrect Regular Expressions in ldap-account-manager
- LDAPAccountManager lam
- Other injection
- CVSS 7.8 High
Incorrect Default Permissions in ldap-account-manager
- LDAPAccountManager lam
- Other injection
- CVSS 6.5 Medium
Unauthenticated LDAP Injection in ldap-account-manager
- LDAPAccountManager lam
- Other injection
- CVSS 8.1 High
Stored XSS and path traversal in LDAPAccountManager/lam
- LDAPAccountManager lam
- Path traversal
- Cross-site scripting (XSS)