https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-4664.htmlhttps://patchthecve.com/cve/CVE-2015-4664.htmlWed, 17 Jun 2026 00:27:41 +0000CRITICAL 9.8: An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.https://patchthecve.com/cve/CVE-2015-4669.htmlhttps://patchthecve.com/cve/CVE-2015-4669.htmlWed, 17 Jun 2026 00:27:42 +0000HIGH 7.8: The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.https://patchthecve.com/cve/CVE-2015-4668.htmlhttps://patchthecve.com/cve/CVE-2015-4668.htmlWed, 17 Jun 2026 00:27:41 +0000MEDIUM 6.1: Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.https://patchthecve.com/cve/CVE-2015-4667.htmlhttps://patchthecve.com/cve/CVE-2015-4667.htmlWed, 17 Jun 2026 00:27:41 +0000CRITICAL 9.8: Multiple hardcoded credentials in Xsuite 2.x.