Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how freeipa compares to other vendors in security performance

View Risk Score →

FreeIPA FreeIPA (ipa-server)Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Risk 22
Severity
4.3
First published (updated )
CVE-2026-19550

FreeIPA SSSDSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Risk 32
Severity
5.5
First published (updated )
CVE-2026-68743

FreeIPA ipa-otpdFreeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization

Risk 28
Severity
4.2
First published (updated )
CVE-2026-14612

FreeIPA FreeIPA ipa-otpd daemon (ipa-otpd)Two related off-by-one memory safety bugs in the FreeIPA ipa-otpd daemon, in oauth2_on_child_readabl…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2496879

FeIPA - CVE-2025-7493 - Privilege Escalation from host to domain admin

First published (updated )
https://seclists.org/oss-sec/2025/q3/244
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreeIPA FreeIPAFreeipa: idm: privilege escalation from host to domain admin in freeipa

Risk 77
Severity
9.1
First published (updated )
CVE-2025-7493

FreeIPA FreeIPAFreeipa: idm: privilege escalation from host to domain admin in freeipa

Risk 76
Severity
9.1
First published (updated )
CVE-2025-4404

FreeIPA FreeIPAThe lack of verification for the uniqueness of the LDAP attribute krbCanonicalName in FreeIPA may le…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2364606

FreeIPA FreeIPAFreeipa: administrative user data leaked through systemd journal

Risk 32
Severity
5.5
First published (updated )
CVE-2024-11029

FreeIPA FreeIPAThe FreeIPA API audit sends the whole FreeIPA ccommand line to journalctl, as consequence during the…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2325557
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/FreeIPAFreeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Risk 79
Severity
8.8
First published (updated )
CVE-2024-2698

FreeIPA FreeIPAIpa: invalid csrf protection

Risk 31
Severity
8.1
EPSS
0.30%
First published (updated )
CVE-2023-5455

redhat Enterprise LinuxA flaw was found in IPA. When sending a very long password (>= 1,000,000 characters) to the server, …

Risk 32
Severity
5.4
First published (updated )
CVE-2020-1722

FreeIPA FreeIPAipa 3.0 does not properly check server identity before sending credential containing cookies

Risk 77
Severity
8.8
First published (updated )
CVE-2012-5631

redhat/FreeIPACode Injection

Risk 81
Severity
8.8
First published (updated )
CVE-2019-14867
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxA flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache aft…

Risk 39
Severity
5.6
First published (updated )
CVE-2019-14826

redhat/FreeIPAInfoleak

Risk 40
Severity
6.5
First published (updated )
CVE-2019-10195

redhat Enterprise Linux Server EusA vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did no…

Risk 60
Severity
8.1
First published (updated )
CVE-2017-2590

FreeIPA FreeIPAFreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-lo…

Risk 79
Severity
8.8
First published (updated )
CVE-2017-11191

FreeIPA FreeIPAInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2017-12169
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreeIPA FreeIPAIpa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's perm…

Risk 46
Severity
6.5
First published (updated )
CVE-2016-9575

Fedoraproject FedoraThe cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which all…

Risk 38
Severity
6.5
First published (updated )
CVE-2016-5404

FreeIPA FreeIPAFreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication att…

Risk 45
Severity
7.5
First published (updated )
CVE-2016-7030

FreeIPA FreeIPAA flaw was found that allows any unauthenticated party to easily run DoS attack against kerberized s…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-1370493

FreeIPA FreeIPAFreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.

Risk 45
Severity
7.5
First published (updated )
CVE-2016-5414
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreeIPA FreeIPAIt was found that FreeIPA fails to check the CA ACLs properly, moreover the SAN name is incorrectly …

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-1360757

FreeIPA sssd_clientA memory leak was found in the sssd_pac_plugin (sssd_pac_plugin.so library), which is distributed wi…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-1267580

redhat/ipaInfoleak

Risk 88
Severity
9.8
First published (updated )
CVE-2015-5284

FreeIPA FreeIPAInput Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2015-5179

FreeIPA FreeIPAalich in the FreeIPA bug tracker reported: A number of non printable strings can cause FreeIPA to i…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-1252567
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203