Vulnerabilidades en LDAPAccountManager
11 resultadosAnálisis Vexday
O LDAPAccountManager apresenta um perfil de risco moderado com 11 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida. A ausência de CVEs críticos (apenas 1) e de atividade de ataque recente reduz a urgência imediata, embora a fraqueza dominante em Improper Neutralization of Special Elements (CWE-74) indique uma classe de problemas estruturais que merece monitoramento contínuo.
CVE-2024-23333HIGHLAM vulnerable to Authenticated Remote Code ExecutionEPSS 17.9%CVE-2022-31084CRITICALUnauthenticated Remote Code Execution in ldap-account-managerEPSS 2.4%CVE-2022-31086MEDIUMIncorrect Regular Expressions in ldap-account-managerEPSS 2.2%CVE-2022-31088MEDIUMUnauthenticated LDAP Injection in ldap-account-managerEPSS 1.2%CVE-2022-24851HIGHStored XSS and path traversal in LDAPAccountManager/lamEPSS 1.1%CVE-2024-52792MEDIUMArbitrary config values override in lamEPSS 0.7%CVE-2022-31087HIGHIncorrect Default Permissions in ldap-account-managerEPSS 0.4%CVE-2026-27895MEDIUMLAM has incorrect regular expression in PDF export component that allows user to upload files of any typeEPSS 0.4%CVE-2026-27894HIGHLAM has Authenticated Local File Inclusion (LFI) in PDF exportEPSS 0.4%CVE-2022-31085MEDIUMMissing Encryption of Sensitive Data in ldap-account-managerEPSS 0.3%CVE-2025-58174MEDIUMLAM profile editor stored cross-site scripting vulnerabilityEPSS 0.2%