FreeIPA
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 43 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization
Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
Monitor FreeIPA in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.