Ca Cloud Service Management vulnerabilities

4 CVEs affecting Ca Cloud Service Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8474, published 2014-11-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8474, published 2014-11-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption)…
CVE-2014-8472, published 2014-11-04. Medium severity, CVSS 6.8. EPSS: 2.2% chance of exploitation in the next 30 days. CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access…
CVE-2014-8471, published 2014-11-04. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors.
CVE-2014-8473, published 2014-11-04. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.