project portfolio management vulnerabilities and fixes

Recent CVEs affecting project portfolio management, with upgrade or downgrade steps. 5 tracked.

Also searched as: projectportfoliomanagement.

project portfolio management has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-08-30. Highest priority: CVE-2018-13824 (score 59/100).

• CVE-2018-13826 CRITICAL 9.1 UPGRADE DOWNGRADE An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5
• CVE-2018-13825 MEDIUM 6.1 UPGRADE DOWNGRADE Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2
• CVE-2018-13824 CRITICAL 9.8 UPGRADE DOWNGRADE Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, an
• CVE-2018-13823 HIGH 7.5 UPGRADE DOWNGRADE An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5
• CVE-2018-13822 HIGH 7.5 UPGRADE Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and

FAQ

How do I fix project portfolio management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is project portfolio management being exploited right now?

None of the tracked project portfolio management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which project portfolio management CVE should I patch first?

CVE-2018-13824 currently ranks highest (59/100): Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, an.

RSS feed for project portfolio management · ← Back to latest CVEs