Approved changes feed: RSS · Atom

cpe:2.3:a:ca:project_portfolio_management:15.3:cp2:*:*:*:*:*:*

part: a version: 15.3 update: cp2

VendorCa (f98a5cd7-dc4a-54aa-9b51-3d576c2d06c8)
ProductProject Portfolio Management (432a2854-221c-55d4-8a5b-27dc04f4d429)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13826 vulnerable 2026-06-08 05:10:52.006721 Details available
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T04:08:43.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13825 vulnerable 2026-06-08 05:10:52.006228 Details available
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T03:59:51.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13824 vulnerable 2026-06-08 05:10:52.005621 Details available
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T02:00:43.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13823 vulnerable 2026-06-08 05:10:52.004979 Details available
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-16T16:38:07.040Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.