Approved changes feed: RSS · Atom

cpe:2.3:a:primekey_solutions_ab:ejbca:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPrimekey Solutions Ab (e3d829bd-23b6-59e8-b890-a95a44e12670)
ProductEjbca (7bbe2c36-2508-53fa-a675-9c2e15e448b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3027 vulnerable 2026-06-08 07:23:07.844617 Open Redirect vulnerability in EJBCA
The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially malicious external sites, which can be exploited for phishing or other social engineering attacks.
Published: 2025-03-31T10:31:51.577Z
Updated: 2025-03-31T12:33:15.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3026 vulnerable 2026-06-08 07:23:07.842869 Improper Neutralization of Special Elements vulnerability in EJBCA
The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his own server for the client to send HTTP requests, provided he succeeds in exploiting it.
Published: 2025-03-31T10:30:24.424Z
Updated: 2025-03-31T12:37:40.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.