FreeIPA
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 49 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership
Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url
Monitor FreeIPA in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.